Lucene search
+L

60 matches found

Positive Technologies
Positive Technologies
added 2024/11/04 12:0 a.m.6 views

PT-2024-16526 · Unknown · Codezips Online Institute Management System

Name of the Vulnerable Software and Affected Versions: Codezips Online Institute Management System version 1.0 Description: A critical vulnerability has been found in the Codezips Online Institute Management System. This issue affects an unknown part of the file /pages/save user.php and allows fo...

9.8CVSS6.7AI score0.00519EPSS
Exploits1References11
OSV
OSV
added 2024/10/30 3:15 a.m.5 views

CVE-2024-10509

A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit...

9.8CVSS5.8AI score0.00784EPSS
Exploits1References4
CVE
CVE
added 2024/10/30 2:31 a.m.53 views

CVE-2024-10509

CVE-2024-10509 affects Codezips Online Institute Management System 1.0. The issue is a SQL injection triggered by manipulating the email parameter in /login.php, allowing remote exploitation. Multiple sources corroborate that the vulnerability is critical with public exploit availability and no a...

9.8CVSS7.7AI score0.00784EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/10/30 2:31 a.m.44 views

CVE-2024-10509 Codezips Online Institute Management System login.php sql injection

A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit...

7.5CVSS0.00784EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/10/30 2:31 a.m.15 views

CVE-2024-10509 Codezips Online Institute Management System login.php sql injection

A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit...

7.5CVSS7.4AI score0.00784EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/10/30 12:0 a.m.12 views

PT-2024-16329 · Unknown · Codezips Online Institute Management System

Name of the Vulnerable Software and Affected Versions: Codezips Online Institute Management System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /login.php. The manipulation of the email argument leads to sql injection. The attack can...

9.8CVSS7.8AI score0.00784EPSS
Exploits1References9
NVD
NVD
added 2024/10/10 4:15 p.m.14 views

CVE-2024-9794

A vulnerability, which was classified as critical, has been found in Codezips Online Shopping Portal 1.0. This issue affects some unknown processing of the file /update-image1.php. The manipulation of the argument productimage1 leads to unrestricted upload. The attack may be initiated remotely. T...

9.8CVSS0.00665EPSS
Exploits1References4
CVE
CVE
added 2024/10/10 4:0 p.m.52 views

CVE-2024-9794

The CVE-2024-9794 entry concerns Codezips Online Shopping Portal 1.0, where the vulnerability resides in /update-image1.php. The issue arises when manipulating the productimage1 argument, enabling unrestricted upload. The affected component is the file handling logic in update-image1.php, with re...

9.8CVSS6.8AI score0.00665EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/10 4:0 p.m.16 views

CVE-2024-9794 Codezips Online Shopping Portal update-image1.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Codezips Online Shopping Portal 1.0. This issue affects some unknown processing of the file /update-image1.php. The manipulation of the argument productimage1 leads to unrestricted upload. The attack may be initiated remotely. T...

6.5CVSS6.5AI score0.00665EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/10/10 4:0 p.m.27 views

CVE-2024-9794 Codezips Online Shopping Portal update-image1.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Codezips Online Shopping Portal 1.0. This issue affects some unknown processing of the file /update-image1.php. The manipulation of the argument productimage1 leads to unrestricted upload. The attack may be initiated remotely. T...

6.5CVSS0.00665EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/10/10 12:0 a.m.8 views

PT-2024-39842 · Unknown · Codezips Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Codezips Online Shopping Portal version 1.0 Description: A critical issue has been found in the processing of the file /update-image1.php, where the manipulation of the productimage1 argument leads to unrestricted upload. This issue can be...

9.8CVSS7.3AI score0.00665EPSS
Exploits1References8
NVD
NVD
added 2024/10/03 3:15 p.m.11 views

CVE-2024-9460

A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

9.8CVSS0.00692EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/10/03 2:31 p.m.27 views

CVE-2024-9460 Codezips Online Shopping Portal index.php sql injection

A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

7.5CVSS0.00692EPSS
Exploits0References4
CVE
CVE
added 2024/10/03 2:31 p.m.55 views

CVE-2024-9460

CVE-2024-9460 affects Codezips Online Shopping Portal 1.0. an SQL injection via the username argument in an unknown function of index.php is reported, with remote exploitation and public disclosure. Multiple sources confirm the risk is due to improper handling of the username parameter leading to...

9.8CVSS7.7AI score0.00692EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2024/10/03 12:0 a.m.6 views

Codezips Online Shopping Portal SQL注入漏洞

Codezips Online Shopping Portal is a Codezips open source online store system. A SQL injection vulnerability exists in Codezips Online Shopping Portal version 1.0, which stems from an incorrect operation of the username parameter that can lead to sql injection...

9.8CVSS8.4AI score0.00692EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/10/03 12:0 a.m.9 views

PT-2024-39648 · Unknown · Codezips Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Codezips Online Shopping Portal version 1.0 Description: A critical issue has been found in the software, allowing for SQL injection through the manipulation of the username argument in an unknown function of the file index.php. This can be...

9.8CVSS8AI score0.00692EPSS
Exploits0References11
NVD
NVD
added 2024/09/20 4:15 p.m.21 views

CVE-2024-9038

A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. The attac...

9.8CVSS0.00734EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/09/20 4:0 p.m.17 views

CVE-2024-9038 Codezips Online Shopping Portal insert-product.php unrestricted upload

A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. The attac...

5.3CVSS4.8AI score0.00734EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/09/20 4:0 p.m.35 views

CVE-2024-9038 Codezips Online Shopping Portal insert-product.php unrestricted upload

A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. The attac...

5.3CVSS0.00734EPSS
Exploits1References4
CVE
CVE
added 2024/09/20 4:0 p.m.79 views

CVE-2024-9038

CVE-2024-9038 affects Codezips Online Shopping Portal 1.0, specifically the insert-product.php functionality. The vulnerability arises from manipulating the productimage1/productimage2/productimage3 parameters, enabling unrestricted file upload. This remote attack has had its exploit disclosed pu...

9.8CVSS5.2AI score0.00734EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder