CVE-2021-40909

Cross site scripting XSS vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the firstname, lastname, and email parameters to /ajaxcrud...

Cross site scripting

Cross site scripting XSS vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the firstname, lastname, and email parameters to /ajaxcrud...

CVE-2021-40909

Cross site scripting XSS vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the firstname, lastname, and email parameters to /ajaxcrud...

CVE-2021-40909

CVE-2021-40909 is an XSS vulnerability in the sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23. The issue allows remote attackers to cause arbitrary code execution through the parameters first_name , last_name , and email sent to /ajax_crud . Publi...

PT-2022-11337

Name of the Vulnerable Software and Affected Versions sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial version 1 Description The issue allows remote attackers to execute arbitrary code via the first name, last name, and email parameters to the "/ajax crud" API...

CVE-2021-40909: Improper Neutralization of Input During Web Page Generation

Cross site scripting XSS vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the firstname, lastname, and email parameters to /ajaxcrud...

sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial SQL注入漏洞

sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial is an open source project to help people learn how to build or develop a PHP CRUD without refresh/reload using Ajax and DataTables. sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial i...

Exploit for Missing Authorization in Vehicle_Service_Management_System_Project Vehicle_Service_Management_System

CVE-2021-46075 Exploit Title: Vehicle Service Management...

Sourcecodester Vehicle Service Management System Elevation of Privilege Vulnerability

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. Sourcecodester Vehicle Service Management System has an elevation of privilege vulnerability that could be exploited by attackers to access...

CVE-2021-46075

A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations...

Privilege escalation

A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations...

CVE-2021-46075

The CVE-2021-46075 entry concerns Sourcecodester Vehicle Service Management System 1.0. The vulnerability is a Privilege Escalation where Staff accounts can access admin resources and perform CRUD operations due to insufficient access controls. Reported impact indicates remote-style potential to ...

CVE-2021-46075

A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations...

CVE-2021-46075: Missing Authorization

A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations...

PT-2022-12553

Name of the Vulnerable Software and Affected Versions Sourcecodester Vehicle Service Management System version 1.0 Description A Privilege Escalation issue exists, allowing staff account users to access admin resources and perform CRUD operations. Recommendations For Sourcecodester Vehicle Servic...

Exploit for Missing Authorization in Vehicle_Service_Management_System_Project Vehicle_Service_Management_System

CVE-2021-46075 Exploit Title: Vehicle Service Management...

MongoDB Server Denial of Service Vulnerability (CNVD-2021-101988)

Mongodb Server is an open source NoSQL database from Mongodb, Inc. The database provides collection-oriented storage, dynamic query, data replication and automatic failover, etc. A denial-of-service vulnerability exists in MongoDB Server, which can be exploited by an attacker with basic CRUD...

CVE-2021-20330

CVE-2021-20330: MongoDB Server prior to versions 4.0.27, 4.2.16, and 4.4.9 are affected. An attacker with basic CRUD permissions on a replicated collection can execute applyOps with specially malformed oplog entries, causing a denial of service on secondaries. Documented impact is DoS on replicas...

ECOA BAS controller cross-site request forgery vulnerability

ECOA BAS controller is an intelligent lighting control solution. ECOA BAS controller is vulnerable to cross-site request forgery, which can be exploited by attackers to send forged requests to malicious web pages and execute CRUD commands to perform arbitrary actions on the system...

Cross site request forgery (csrf)

ECOA BAS controller has a Cross-Site Request Forgery vulnerability, thus authenticated attacker can remotely place a forged request at a malicious web page and execute CRUD commands GET, POST, PUT, DELETE to perform arbitrary operations in the system...