Lucene search
+L

422 matches found

CNNVD
CNNVD
added 2024/03/12 12:0 a.m.9 views

sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial SQL Injection Vulnerability

sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial is an open source project to help people learn how to build or develop a PHP CRUD without refresh/reload using Ajax and DataTables. sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial...

9.8CVSS7.9AI score0.00693EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/03/12 12:0 a.m.7 views

PT-2024-20184 · Unknown · Sourcecodester Crud Without Page Reload

Name of the Vulnerable Software and Affected Versions: SourceCodester CRUD without Page Reload version 1.0 Description: A critical issue has been found, affecting an unknown functionality of the file add user.php. The manipulation of the city argument leads to SQL injection. This issue can be...

9.8CVSS8.1AI score0.00693EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/03/08 12:0 a.m.12 views

PT-2024-14057 · Trendnet · Trendnet Ac1200 Tew-821Dap

Name of the Vulnerable Software and Affected Versions: TRENDnet AC1200 TEW-821DAP version 3.00b06 Description: A Buffer Overflow issue allows an attacker to execute arbitrary code via the adm add user action. This can be exploited to gain unauthorized access and control over the device...

8CVSS8.2AI score0.00498EPSS
SaveExploits1References8
OSV
OSV
added 2024/01/31 7:15 p.m.7 views

CVE-2024-1111

A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Login System 1.0. Affected by this issue is some unknown functionality of the file add-user.php. The manipulation of the argument qr-code leads to cross site scripting. The attack may be launched...

6.1CVSS4AI score0.00415EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/01/31 7:0 p.m.10 views

CVE-2024-1111 SourceCodester QR Code Login System add-user.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Login System 1.0. Affected by this issue is some unknown functionality of the file add-user.php. The manipulation of the argument qr-code leads to cross site scripting. The attack may be launched...

5CVSS4.8AI score0.00415EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/01/31 12:0 a.m.10 views

SourceCodester QR Code Login System 安全漏洞

QR Code Login System is a modern authentication QR code solution for rems individual developers. A security vulnerability exists in the SourceCodester QR Code Login System version 1.0, which stems from the fact that add-user.php contains an unknown function that leads to cross-site scripting via...

6.1CVSS5.6AI score0.00415EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/01/31 12:0 a.m.9 views

PT-2024-16770

Name of the Vulnerable Software and Affected Versions SourceCodester QR Code Login System version 1.0 Description A vulnerability has been found in the SourceCodester QR Code Login System, affecting some unknown functionality of the file add-user.php. The manipulation of the qr-code argument lead...

6.1CVSS4.9AI score0.00415EPSS
SaveExploits0References8
OSV
OSV
added 2024/01/03 9:15 a.m.8 views

CVE-2023-50921

An issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the adduser interface in the system module to gain root privileges. This affects A1300 4.4.6, AX1800 4.4.6, AXT1800 4.4.6, MT3000 4.4.6, MT2500 4.4.6, MT6000 4.5.0, MT1300 4.3.7, MT300N-V2 4.3.7, AR750S 4.3.7, AR750...

9.8CVSS5.8AI score0.00519EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/01/03 12:0 a.m.9 views

Various GL.iNet products Security Breach

GL.iNet MT3000 and others are products of China's GL.iNet GL.iNet.GL.iNet MT3000 is an AX3000 portable router that uses the Wi-Fi 6 protocol.GL.iNet AR750S is a router.GL.iNet AR750 is a router.GL.iNet AR750 is a router. A security vulnerability exists in several GL.iNet products that originated...

9.8CVSS7AI score0.00519EPSS
SaveExploits0References2
OSV
OSV
added 2023/12/02 9:15 a.m.8 views

CVE-2023-6464

A vulnerability was found in SourceCodester User Registration and Login System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument user leads to sql injection. The attack may be launched remotely...

9.8CVSS5.8AI score0.00796EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/12/02 12:0 a.m.9 views

SourceCodester User Registration and Login System SQL Injection Vulnerability

User Registration and Login System is a user registration and login system by Remy Andrade, an individual developer. A SQL injection vulnerability exists in the SourceCodester User Registration and Login System, which originates from an SQL injection in the user parameter of /endpoint/add-user.ph...

9.8CVSS8AI score0.00796EPSS
SaveExploits1References3
OSV
OSV
added 2023/12/01 11:15 p.m.7 views

CVE-2023-6463

A vulnerability has been found in SourceCodester User Registration and Login System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument firstname leads to cross site scripting. The attac...

5.4CVSS3.8AI score0.00604EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/12/01 10:31 p.m.41 views

CVE-2023-6463 SourceCodester User Registration and Login System add-user.php cross site scripting

A vulnerability has been found in SourceCodester User Registration and Login System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument firstname leads to cross site scripting. The attac...

4CVSS5.5AI score0.00604EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/12/01 12:0 a.m.9 views

PT-2023-32676 · Unknown · Sourcecodester User Registration/Login System

Name of the Vulnerable Software and Affected Versions: SourceCodester User Registration and Login System version 1.0 Description: A vulnerability has been found in the system, classified as problematic. It affects an unknown functionality of the file "/endpoint/add-user.php". The manipulation of...

5.4CVSS4.2AI score0.00604EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/12/01 12:0 a.m.46 views

SourceCodester User Registration and Login System Cross-Site Scripting Vulnerability

User Registration and Login System is a user registration and login system by Remy Andrade, an individual developer. A cross-site scripting vulnerability exists in the SourceCodester User Registration and Login System, which originates from cross-site scripting in the firstname parameter of...

5.4CVSS6.1AI score0.00604EPSS
SaveExploits1References3
Rapid7 Blog
Rapid7 Blog
added 2023/10/27 6:46 p.m.53 views

Metasploit Weekly Wrap-Up

New module content 4 Atlassian Confluence Data Center and Server Authentication Bypass via Broken Access Control Authors: Emir Polat and Unknown Type: Auxiliary Pull request: 18447 contributed by emirpolatt Path: admin/http/atlassianconfluenceauthbypass AttackerKB reference: CVE-2023-22515...

7.5CVSS9.5AI score0.99156EPSS
SaveExploits47
OSV
OSV
added 2023/10/20 10:15 p.m.7 views

CVE-2023-43355

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the password and password again parameters in the My Preferences - Add user component...

5.4CVSS6.1AI score0.00485EPSS
SaveExploits1References2
NVD
NVD
added 2023/10/20 10:15 p.m.29 views

CVE-2023-43355

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the password and password again parameters in the My Preferences - Add user component...

5.4CVSS5.8AI score0.00485EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/10/20 10:15 p.m.6 views

CVE-2023-43355

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the password and password again parameters in the My Preferences - Add user component...

5.4CVSS6.2AI score0.00485EPSS
SaveExploits1References3
Prion
Prion
added 2023/10/20 10:15 p.m.22 views

Cross site scripting

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the password and password again parameters in the My Preferences - Add user component...

4.9CVSS5.7AI score0.00485EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder