Lucene search
K

1434 matches found

NVD
NVD
added 2024/12/31 9:15 a.m.16 views

CVE-2024-13067

A vulnerability was found in CodeAstro Online Food Ordering System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/allusers.php of the component All Users Page. The manipulation leads to improper access controls. The attack may be initiated remotely...

6.9CVSS0.00808EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/12/31 9:0 a.m.9 views

CVE-2024-13067 CodeAstro Online Food Ordering System All Users Page all_users.php access control

A vulnerability was found in CodeAstro Online Food Ordering System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/allusers.php of the component All Users Page. The manipulation leads to improper access controls. The attack may be initiated remotely...

6.9CVSS6.6AI score0.00808EPSS
Exploits1References5
CVE
CVE
added 2024/12/31 9:0 a.m.55 views

CVE-2024-13067

CVE-2024-13067 affects CodeAstro Online Food Ordering System 1.0, with improper access controls on the /admin/all_users.php page. The vulnerability allows remote initiation and has had exploits disclosed publicly. Connected sources consistently identify the affected component and the access-contr...

6.9CVSS5.4AI score0.00808EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2024/12/31 9:0 a.m.16 views

CVE-2024-13067 CodeAstro Online Food Ordering System All Users Page all_users.php access control

A vulnerability was found in CodeAstro Online Food Ordering System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/allusers.php of the component All Users Page. The manipulation leads to improper access controls. The attack may be initiated remotely...

6.9CVSS0.00808EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/12/31 12:0 a.m.2 views

CodeAstro Online Food Ordering System 安全漏洞

CodeAstro Online Food Ordering System is an online food ordering system from CodeAstro, Inc. A security vulnerability exists in CodeAstro Online Food Ordering System version 1.0 that stems from improper access control...

6.9CVSS5.5AI score0.00808EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/12/31 12:0 a.m.3 views

CodeAstro Online Food Ordering System 注入漏洞

CodeAstro Online Food Ordering System is an online food ordering system from CodeAstro, Inc. An injection vulnerability exists in CodeAstro Online Food Ordering System version 1.0, which stems from an incorrect operation of the parameter userupd that can result in SQL injection...

8.8CVSS7.1AI score0.00499EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/12/31 12:0 a.m.3 views

PT-2024-17915 · Unknown · Codeastro Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: CodeAstro Online Food Ordering System version 1.0 Description: A critical issue has been identified in the CodeAstro Online Food Ordering System, affecting an unknown functionality of the file /admin/update users.php, specifically the Update...

8.8CVSS7.2AI score0.00499EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2024/12/31 12:0 a.m.3 views

PT-2024-17912 · Unknown · Codeastro Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: CodeAstro Online Food Ordering System version 1.0 Description: A critical issue affects some unknown processing of the file /admin/all users.php of the component All Users Page, leading to improper access controls. The attack may be initiated...

6.9CVSS5.7AI score0.00808EPSS
Exploits1References10
OSV
OSV
added 2024/12/30 4:15 a.m.3 views

CVE-2024-13038

A vulnerability was found in CodeAstro Simple Loan Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be...

9.8CVSS5.8AI score0.00744EPSS
Exploits1References5
NVD
NVD
added 2024/12/30 4:15 a.m.19 views

CVE-2024-13038

A vulnerability was found in CodeAstro Simple Loan Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be...

9.8CVSS0.00744EPSS
Exploits1References5
CVE
CVE
added 2024/12/30 4:0 a.m.67 views

CVE-2024-13038

CVE-2024-13038 affects CodeAstro Simple Loan Management System v1.0, specifically the Login module’s /index.php. The vulnerability arises from manipulating the email parameter, causing SQL injection. It is exploitable remotely, and public exploits are disclosed. Multiple sources corroborate the i...

9.8CVSS7.5AI score0.00744EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2024/12/30 4:0 a.m.18 views

CVE-2024-13038 CodeAstro Simple Loan Management System Login index.php sql injection

A vulnerability was found in CodeAstro Simple Loan Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be...

7.5CVSS0.00744EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/12/30 4:0 a.m.13 views

CVE-2024-13038 CodeAstro Simple Loan Management System Login index.php sql injection

A vulnerability was found in CodeAstro Simple Loan Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be...

7.5CVSS7.3AI score0.00744EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/12/30 12:0 a.m.4 views

PT-2024-17895 · Codeastro · Codeastro Simple Loan Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Simple Loan Management System version 1.0 Description: A critical issue has been found in the CodeAstro Simple Loan Management System. The problem affects an unknown functionality of the /index.php file in the Login component...

9.8CVSS7.9AI score0.00744EPSS
Exploits1References14
CNNVD
CNNVD
added 2024/12/30 12:0 a.m.3 views

CodeAstro Simple Loan Management System 安全漏洞

CodeAstro Simple Loan Management System is an online loan management system project from CodeAstro based on PHP language and MySQL database. A security vulnerability exists in CodeAstro Simple Loan Management System version 1.0, which stems from an incorrect manipulation of the parameter email th...

9.8CVSS7.8AI score0.00744EPSS
Exploits1References5
OSV
OSV
added 2024/12/27 6:15 a.m.2 views

CVE-2024-12981

A vulnerability was found in CodeAstro Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /bookingconfirm.php. The manipulation of the argument driveridfromdropdown leads to sql injection. The attack can be launched...

9.8CVSS5.8AI score0.0053EPSS
Exploits1References5
NVD
NVD
added 2024/12/27 6:15 a.m.12 views

CVE-2024-12981

A vulnerability was found in CodeAstro Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /bookingconfirm.php. The manipulation of the argument driveridfromdropdown leads to sql injection. The attack can be launched...

9.8CVSS0.0053EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/12/27 5:31 a.m.8 views

CVE-2024-12981 CodeAstro Car Rental System bookingconfirm.php sql injection

A vulnerability was found in CodeAstro Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /bookingconfirm.php. The manipulation of the argument driveridfromdropdown leads to sql injection. The attack can be launched...

6.5CVSS7AI score0.0053EPSS
Exploits1References5
CVE
CVE
added 2024/12/27 5:31 a.m.57 views

CVE-2024-12981

CodeAstro Car Rental System 1.0 contains an SQL injection in /bookingconfirm.php caused by improper handling of the driver_id_from_dropdown parameter. The vulnerability can be exploited remotely and has been disclosed publicly; other parameters may be affected as well. The affected component is t...

9.8CVSS6.8AI score0.0053EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2024/12/27 5:31 a.m.16 views

CVE-2024-12981 CodeAstro Car Rental System bookingconfirm.php sql injection

A vulnerability was found in CodeAstro Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /bookingconfirm.php. The manipulation of the argument driveridfromdropdown leads to sql injection. The attack can be launched...

6.5CVSS0.0053EPSS
Exploits1References5
Rows per page
Query Builder