Lucene search
+L

368 matches found

Cvelist
Cvelist
added 2024/09/07 8:31 p.m.44 views

CVE-2024-8564 SourceCodester PHP CRUD update.php sql injection

A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/update.php. The manipulation of the argument tblpersonid/firstname/middlename/lastname leads to sql injection. The attack can be initiated...

6.5CVSS0.00415EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/09/07 8:31 p.m.34 views

CVE-2024-8564 SourceCodester PHP CRUD update.php sql injection

A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/update.php. The manipulation of the argument tblpersonid/firstname/middlename/lastname leads to sql injection. The attack can be initiated...

6.5CVSS7.6AI score0.00415EPSS
SaveExploits0References4
NVD
NVD
added 2024/09/07 8:15 p.m.24 views

CVE-2024-8563

A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/update.php. The manipulation of the argument firstname/middlename/lastname leads to cross site scripting. It is possible to initiate the attack...

6.1CVSS0.00401EPSS
SaveExploits1References4
CVE
CVE
added 2024/09/07 8:00 p.m.68 views

CVE-2024-8563

CVE-2024-8563 affects SourceCodester PHP CRUD 1.0. The issue is an XSS vulnerability in /endpoint/update.php , triggered by manipulating the parameters first_name , middle_name , or last_name . Exploitation can be performed remotely and the exploit has been disclosed publicly. Root cause: imprope...

6.1CVSS4.2AI score0.00401EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/07 8:00 p.m.46 views

CVE-2024-8563 SourceCodester PHP CRUD update.php cross site scripting

A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/update.php. The manipulation of the argument firstname/middlename/lastname leads to cross site scripting. It is possible to initiate the attack...

5.3CVSS6.3AI score0.00401EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/09/07 8:00 p.m.46 views

CVE-2024-8563 SourceCodester PHP CRUD update.php cross site scripting

A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/update.php. The manipulation of the argument firstname/middlename/lastname leads to cross site scripting. It is possible to initiate the attack...

5.3CVSS0.00401EPSS
SaveExploits1References4
OSV
OSV
added 2024/09/07 7:15 p.m.10 views

CVE-2024-8562

A vulnerability was found in SourceCodester PHP CRUD 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/Add.php. The manipulation of the argument firstname/middlename/lastname leads to cross site scripting. The attack may be launched...

6.1CVSS3.8AI score0.00308EPSS
SaveExploits0References3
OSV
OSV
added 2024/09/07 7:15 p.m.10 views

CVE-2024-8561

A vulnerability has been found in SourceCodester PHP CRUD 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete.php of the component Delete Person Handler. The manipulation of the argument person leads to sql injection. The attack...

9.8CVSS6.4AI score0.00436EPSS
SaveExploits0References4
NVD
NVD
added 2024/09/07 7:15 p.m.58 views

CVE-2024-8561

A vulnerability has been found in SourceCodester PHP CRUD 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete.php of the component Delete Person Handler. The manipulation of the argument person leads to sql injection. The attack...

9.8CVSS0.00436EPSS
SaveExploits0References4
NVD
NVD
added 2024/09/07 7:15 p.m.45 views

CVE-2024-8562

A vulnerability was found in SourceCodester PHP CRUD 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/Add.php. The manipulation of the argument firstname/middlename/lastname leads to cross site scripting. The attack may be launched...

6.1CVSS0.00308EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/09/07 7:00 p.m.46 views

CVE-2024-8562 SourceCodester PHP CRUD Add.php cross site scripting

A vulnerability was found in SourceCodester PHP CRUD 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/Add.php. The manipulation of the argument firstname/middlename/lastname leads to cross site scripting. The attack may be launched...

5.3CVSS0.00308EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/09/07 7:00 p.m.14 views

CVE-2024-8562 SourceCodester PHP CRUD Add.php cross site scripting

A vulnerability was found in SourceCodester PHP CRUD 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/Add.php. The manipulation of the argument firstname/middlename/lastname leads to cross site scripting. The attack may be launched...

5.3CVSS6.3AI score0.00308EPSS
SaveExploits0References3
CVE
CVE
added 2024/09/07 7:00 p.m.58 views

CVE-2024-8562

CVE-2024-8562 refers to a cross-site scripting vulnerability in SourceCodester PHP CRUD 1.0, affecting the file /endpoint/Add.php. The issue arises from manipulating the arguments first_name, middle_name, and last_name, enabling remote, browser-based script execution. Public exploit discussion is...

6.1CVSS4.1AI score0.00308EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/07 6:31 p.m.22 views

CVE-2024-8561 SourceCodester PHP CRUD Delete Person delete.php sql injection

A vulnerability has been found in SourceCodester PHP CRUD 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete.php of the component Delete Person Handler. The manipulation of the argument person leads to sql injection. The attack...

6.5CVSS7.5AI score0.00436EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/09/07 6:31 p.m.39 views

CVE-2024-8561 SourceCodester PHP CRUD Delete Person delete.php sql injection

A vulnerability has been found in SourceCodester PHP CRUD 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete.php of the component Delete Person Handler. The manipulation of the argument person leads to sql injection. The attack...

6.5CVSS0.00436EPSS
SaveExploits0References4
CVE
CVE
added 2024/09/07 6:31 p.m.68 views

CVE-2024-8561

CVE-2024-8561 affects SourceCodester PHP CRUD 1.0, specifically the Delete Person Handler in /endpoint/delete.php. The vulnerability arises from manipulating the person parameter, leading to SQL injection that can be exploited remotely. The connected sources confirm the affected component and att...

9.8CVSS7.1AI score0.00436EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2024/09/07 12:00 a.m.11 views

PHP CRUD SQL注入漏洞

PHP CRUD is a PHP-based implementation of add, delete and retrieve. A SQL injection vulnerability exists in PHP CRUD version 1.0, which stems from an SQL injection vulnerability contained in the person parameter of the /endpoint/delete.php file...

9.8CVSS7.1AI score0.00436EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/09/07 12:00 a.m.14 views

PHP CRUD SQL注入漏洞

PHP CRUD is a PHP-based implementation of add, delete, change and retrieve. A SQL injection vulnerability exists in SourceCodester PHP CRUD version 1.0, which originates from the tblpersonid/firstname/middlename/lastname parameters of the /endpoint/update.php file containing a SQL injection...

8.8CVSS7.1AI score0.00415EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/06/24 12:00 a.m.11 views

Cruddiy Command Injection Vulnerability

Cruddiy is a free no-code PHP bootstrap CRUD generator by Jan van den Berg, a personal developer. A security vulnerability exists in Cruddiy that stems from vulnerability to shell command injection attacks...

8.8CVSS7.5AI score0.01115EPSS
SaveExploits0References5
OSV
OSV
added 2024/06/05 3:10 p.m.37 views

GO-2024-2629 Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana

Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...

8.8CVSS6.8AI score0.00802EPSS
SaveExploits0References3
Rows per page
Query Builder