Lucene search
+L

554 matches found

Cvelist
Cvelist
•added 2024/03/07 11:00 p.m.•41 views

CVE-2024-2269 keerti1924 Online-Book-Store-Website search.php sql injection

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. The...

6.5CVSS7AI score0.00558EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/03/07 11:00 p.m.•19 views

CVE-2024-2269 keerti1924 Online-Book-Store-Website search.php sql injection

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. The...

6.5CVSS7.2AI score0.00558EPSS
SaveExploits0References3
CVE
CVE
•added 2024/03/07 11:00 p.m.•78 views

CVE-2024-2269

CVE-2024-2269 affects keerti1924 Online-Book-Store-Website 1.0. The vulnerability is in the /search.php file where the search parameter is manipulated to cause SQL injection. It can be exploited remotely, and the exploit has been disclosed publicly. The CVSS metrics across sources indicate high s...

9.8CVSS6.8AI score0.00558EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2024/03/07 10:31 p.m.•94 views

CVE-2024-2268

CVE-2024-2268 affects the keerti1924 Online-Book-Store-Website 1.0. The vulnerability is tied to an unrestricted upload via the file /product_update.php?update=1, specifically manipulating the argument update_image. This leads to remote execution potential. Public exploit information is present; ...

9.8CVSS4.8AI score0.00568EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/07 10:31 p.m.•26 views

CVE-2024-2268 keerti1924 Online-Book-Store-Website unrestricted upload

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been classified as critical. Affected is an unknown function of the file /productupdate.php?update=1. The manipulation of the argument updateimage leads to unrestricted upload. It is possible to launch the attack...

5.8CVSS6.8AI score0.00568EPSS
SaveExploits0References3
OSV
OSV
•added 2024/03/07 10:15 p.m.•14 views

CVE-2024-2267

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /shop.php. The manipulation of the argument productprice leads to business logic errors. The attack may be initiated remotely. The exploit ha...

7.5CVSS4.8AI score0.00518EPSS
SaveExploits0References3
NVD
NVD
•added 2024/03/07 10:15 p.m.•30 views

CVE-2024-2267

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /shop.php. The manipulation of the argument productprice leads to business logic errors. The attack may be initiated remotely. The exploit ha...

7.5CVSS4.7AI score0.00518EPSS
SaveExploits0References3
Prion
Prion
•added 2024/03/07 10:15 p.m.•35 views

Design/Logic Flaw

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /shop.php. The manipulation of the argument productprice leads to business logic errors. The attack may be initiated remotely. The exploit ha...

4CVSS7.2AI score0.00518EPSS
SaveExploits0References3
CVE
CVE
•added 2024/03/07 10:00 p.m.•88 views

CVE-2024-2267

CVE-2024-2267 affects the keerti1924 Online-Book-Store-Website, version 1.0. The issue is a logic error in the processing of the file /shop.php, caused by manipulating the argument product_price which leads to business logic errors. A remote attacker could exploit this, and public disclosures exi...

7.5CVSS4.6AI score0.00518EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/07 10:00 p.m.•22 views

CVE-2024-2267 keerti1924 Online-Book-Store-Website shop.php logic error

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /shop.php. The manipulation of the argument productprice leads to business logic errors. The attack may be initiated remotely. The exploit ha...

4.3CVSS6.8AI score0.00518EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/03/07 10:00 p.m.•50 views

CVE-2024-2267 keerti1924 Online-Book-Store-Website shop.php logic error

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /shop.php. The manipulation of the argument productprice leads to business logic errors. The attack may be initiated remotely. The exploit ha...

4.3CVSS5AI score0.00518EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/03/07 12:00 a.m.•16 views

Online-Book-Store-Website SQL Injection Vulnerability

Online-Book-Store-Website is an online bookstore website. A SQL injection vulnerability exists in Online-Book-Store-Website version 1.0, which originates from a SQL injection vulnerability in the productname parameter of the /home.php file...

9.8CVSS7.9AI score0.00558EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/07 12:00 a.m.•15 views

Online-Book-Store-Website Cross-Site Scripting Vulnerability

Online-Book-Store-Website is an online bookstore website. A cross-site scripting vulnerability exists in Online-Book-Store-Website version 1.0, which originates from a cross-site scripting vulnerability in the name parameter of the /signup.php file...

6.1CVSS6.2AI score0.00552EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/07 12:00 a.m.•1 views

CVE-2024-2271: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. It is possible to initiate the...

9.8CVSS5.5AI score0.00558EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/07 12:00 a.m.•1 views

CVE-2024-2272: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in keerti1924 Online-Book-Store-Website 1.0. This vulnerability affects unknown code of the file /home.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. The attack can be initiated...

9.8CVSS5.5AI score0.00558EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/07 12:00 a.m.•1 views

CVE-2024-2270: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /signup.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The...

6.1CVSS3.8AI score0.00552EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/07 12:00 a.m.•3 views

CVE-2024-2268: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been classified as critical. Affected is an unknown function of the file /productupdate.php?update=1. The manipulation of the argument updateimage leads to unrestricted upload. It is possible to launch the attack...

9.8CVSS5.4AI score0.00568EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/07 12:00 a.m.•33 views

Online-Book-Store-Website SQL Injection Vulnerability

Online-Book-Store-Website is an online bookstore website. A SQL injection vulnerability exists in Online-Book-Store-Website version 1.0, which originates from an SQL injection vulnerability in the productname parameter of the /shop.php file...

9.8CVSS8AI score0.00558EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/07 12:00 a.m.•14 views

Online-Book-Store-Website Security Vulnerability

Online-Book-Store-Website is an online bookstore website. A security vulnerability exists in Online-Book-Store-Website version 1.0, which is caused by a business logic error in the productprice parameter of the /shop.php file...

7.5CVSS6.8AI score0.00518EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/07 12:00 a.m.•0 views

CVE-2024-2267: Undefined Security Weakness

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0 and classified as problematic. This issue affects some unknown processing of the file /shop.php. The manipulation of the argument productprice leads to business logic errors. The attack may be initiated remotely. The exploit ha...

7.5CVSS5.3AI score0.00518EPSS
SaveExploits0References2
Rows per page
Query Builder