Lucene search
+L

10285 matches found

CNNVD
CNNVD
•added 2023/03/01 12:00 a.m.•17 views

Alphabet YouTube Embedded 安全漏洞

Alphabet YouTube Embedded is a video sharing application from Alphabet USA. A security vulnerability exists in the Alphabet YouTube Embedded version 1.2 SDK, which stems from a ClassLoader that the SDK can load for malicious applications...

7.3CVSS7.3AI score0.00111EPSS
SaveExploits0References2
OSV
OSV
•added 2023/02/28 9:15 p.m.•16 views

CVE-2023-1099

A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file eduauth/edit-class-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launch...

9.8CVSS5.8AI score0.00653EPSS
SaveExploits0References3
Prion
Prion
•added 2023/02/28 9:15 p.m.•36 views

Sql injection

A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file eduauth/edit-class-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launch...

6.5CVSS9.6AI score0.00653EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/02/28 8:03 p.m.•15 views

CVE-2023-1099 SourceCodester Online Student Management System edit-class-detail.php sql injection

A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file eduauth/edit-class-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launch...

6.5CVSS7.3AI score0.00653EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/28 12:00 a.m.•6 views

CVE-2023-1099: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file eduauth/edit-class-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launch...

9.8CVSS5.5AI score0.00653EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/02/28 12:00 a.m.•20 views

Student Management System SQL注入漏洞

Student Management System is a simple web-based student management software by the individual developer of Sk.Amir Hamza, Bangladesh. SourceCodester Online Student Management System version 1.0 has a SQL injection vulnerability that originates from a problem with the file...

9.8CVSS7.1AI score0.00653EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/02/28 12:00 a.m.•16 views

PT-2023-16753 · Unknown · Sourcecodester Online Student Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student Management System version 1.0 Description: A critical issue affects some unknown functionality of the file eduauth/edit-class-detail.php. The manipulation of the editid argument leads to sql injection. The attack...

9.8CVSS6.9AI score0.00653EPSS
SaveExploits0References6
zdt
zdt
•added 2023/02/27 12:00 a.m.•316 views

Yoga Class Registration System 1.0 SQL Injection Vulnerability

Exploit Title: Authenticated POST based SQL Injection when delete user on Yoga Class Registration System Exploit Author: Ahmed Ismail @MrOz1l Vendor Homepage: https://www.sourcecodester.com/php/16097/yoga-class-registration-system-php-and-mysql-free-source-code.html Software Link: download link i...

9.8CVSS9.2AI score0.00541EPSS
SaveExploits2
OSV
OSV
•added 2023/02/26 12:15 p.m.•17 views

CVE-2023-1039

A vulnerability classified as critical was found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index3.php of the component POST Parameter Handler. The manipulation of the argument password leads to sql...

8.8CVSS6.8AI score0.00791EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/02/26 12:00 a.m.•13 views

SourceCodester Class and Exam Timetabling System SQL注入漏洞

Class and Exam Timetabling System is a class and exam timetabling system by the individual developer Cherylda Jardeliza Ohiman. SourceCodester Class and Exam Timetabling System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter password...

8.8CVSS7.7AI score0.00791EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/26 12:00 a.m.•6 views

CVE-2023-1039: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index3.php of the component POST Parameter Handler. The manipulation of the argument password leads to sql...

8.8CVSS5.5AI score0.00791EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/02/26 12:00 a.m.•28 views

PT-2023-1564 · Unknown · Class/Exam Timetabling System

Name of the Vulnerable Software and Affected Versions: Class and Exam Timetabling System version 1.0 Description: The issue is related to the lack of protection against SQL query structure manipulation when handling the password parameter in the index3.php script of the Class and Exam Timetabling...

10CVSS8.1AI score0.00791EPSS
SaveExploits1References5
OSV
OSV
•added 2023/02/24 12:00 a.m.•33 views

CVE-2023-0481

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user...

3.3CVSS4AI score
SaveExploits0References3
OSV
OSV
•added 2023/02/23 12:15 p.m.•23 views

CVE-2023-0982

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Add Class Entry. The manipulation of the argument id leads to sql injection. The attack can be launched...

9.8CVSS6.6AI score0.00541EPSS
SaveExploits2References2
OSV
OSV
•added 2023/02/23 12:15 p.m.•18 views

CVE-2023-0981

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. Affected is an unknown function of the component Delete User. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifie...

9.8CVSS6.5AI score0.00541EPSS
SaveExploits2References2
NVD
NVD
•added 2023/02/23 12:15 p.m.•45 views

CVE-2023-0982

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Add Class Entry. The manipulation of the argument id leads to sql injection. The attack can be launched...

9.8CVSS7.4AI score0.00541EPSS
SaveExploits2References2
NVD
NVD
•added 2023/02/23 12:15 p.m.•49 views

CVE-2023-0981

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. Affected is an unknown function of the component Delete User. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifie...

9.8CVSS7.4AI score0.00541EPSS
SaveExploits2References2
OSV
OSV
•added 2023/02/23 12:15 p.m.•14 views

CVE-2023-0980

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/registrations/updatestatus.php of the component Status Update Handler. The manipulation of the argument id leads to sql injection...

9.8CVSS6.6AI score0.00541EPSS
SaveExploits0References2
NVD
NVD
•added 2023/02/23 12:15 p.m.•39 views

CVE-2023-0980

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/registrations/updatestatus.php of the component Status Update Handler. The manipulation of the argument id leads to sql injection...

9.8CVSS7.4AI score0.00541EPSS
SaveExploits0References2
Prion
Prion
•added 2023/02/23 12:15 p.m.•28 views

Sql injection

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Add Class Entry. The manipulation of the argument id leads to sql injection. The attack can be launched...

6.5CVSS9.7AI score0.00541EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder