Lucene search
+L

171 matches found

CNNVD
CNNVD
•added 2024/04/07 12:00 a.m.•15 views

Online Courseware SQL注入漏洞

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates from an SQL injection attack on the id parameter of the admin/edit.php file...

9.8CVSS7AI score0.00756EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/04/07 12:00 a.m.•19 views

PT-2024-25743 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue has been found in the software, affecting the file admin/deactivatestud.php. The manipulation of the selector argument leads to SQL injection. This issue can be...

9.8CVSS7.2AI score0.0068EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2024/04/07 12:00 a.m.•15 views

PT-2024-25760 · Unknown · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue has been found in the software. The problem is related to an unknown function in the file admin/listscore.php, where the manipulation of the title argument leads to SQ...

9.8CVSS7.1AI score0.00759EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2024/04/07 12:00 a.m.•12 views

Online Courseware 跨站脚本漏洞

DPEC Online Courseware is an online courseware system from DPEC. A cross-site scripting vulnerability exists in Online Courseware version 1.0, which can be exploited due to a cross-site scripting attack on the id parameter of the addq.php file...

5.4CVSS4.4AI score0.00609EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/04/07 12:00 a.m.•11 views

Online Courseware 安全漏洞

DPEC Online Courseware is an online courseware system from DPEC Corporation. A security vulnerability exists in version 1.0 of Online Courseware, which is caused by an SQL injection attack in the selector parameter of the admin/activatestud.php file...

9.8CVSS7AI score0.00812EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/04/07 12:00 a.m.•14 views

PT-2024-25726 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue has been found in the processing of the file admin/saveeditt.php, where the manipulation of the contact argument leads to sql injection. The attack can be initiated...

9.8CVSS6.9AI score0.00756EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2024/04/07 12:00 a.m.•14 views

Online Courseware SQL注入漏洞

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates from a SQL injection attack in the contact parameter of the admin/saveditt.php file...

9.8CVSS7AI score0.00756EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/04/07 12:00 a.m.•14 views

PT-2024-25774 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A problematic issue has been found in the file editt.php, where the manipulation of the id argument leads to cross-site scripting. The attack can be launched remotely. Recommendations:...

5.4CVSS6.9AI score0.00581EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2024/04/07 12:00 a.m.•18 views

PT-2024-25723 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue was found in the admin/editt.php file, where the manipulation of the id argument leads to SQL injection. The attack can be initiated remotely. Recommendations: For...

9.8CVSS7.3AI score0.00941EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/07 12:00 a.m.•1 views

CVE-2024-3428: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Online Courseware 1.0 and classified as problematic. This vulnerability affects unknown code of the file edit.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

6.1CVSS3.8AI score0.0057EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/07 12:00 a.m.•3 views

CVE-2024-3418: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file admin/deactivateteach.php. The manipulation of the argument selector leads to sql injection. It is possible to launch the attack remotely. The exploit...

9.8CVSS5.5AI score0.00707EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/07 12:00 a.m.•2 views

CVE-2024-3422: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Courseware 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/activatestud.php. The manipulation of the argument selector leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS5.5AI score0.00812EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/07 12:00 a.m.•21 views

PT-2024-25735 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue was found in the software, affecting some unknown functionality of the file admin/saveedit.php. The manipulation of the id argument leads to sql injection. The attack...

9.8CVSS6.9AI score0.00756EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/07 12:00 a.m.•3 views

CVE-2024-3426: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Courseware 1.0. Affected by this issue is some unknown functionality of the file editt.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The...

5.4CVSS3.9AI score0.00581EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/07 12:00 a.m.•10 views

Online Courseware SQL注入漏洞

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates from the selector parameter in the admin/activateall.php file and can be exploited for SQL injection attacks...

9.8CVSS7AI score0.00756EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/04/07 12:00 a.m.•16 views

PT-2024-25775 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A problematic issue was found in the file addq.php, where the manipulation of the id argument leads to cross-site scripting. This issue can be initiated remotely. Recommendations: For...

5.4CVSS6.6AI score0.00609EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2024/04/07 12:00 a.m.•15 views

PT-2024-25728 · Unknown · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue was found in the software, affecting an unknown function of the file admin/deactivateteach.php. The manipulation of the selector argument leads to SQL injection. It is...

9.8CVSS7.2AI score0.00707EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2024/04/07 12:00 a.m.•17 views

PT-2024-25778 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A problematic issue has been found in the software, affecting the file edit.php. The manipulation of the id argument leads to cross-site scripting. The attack can be initiated remotely...

6.1CVSS6.7AI score0.0057EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2024/04/07 12:00 a.m.•14 views

Online Courseware 安全漏洞

DPEC Online Courseware is an online courseware system from DPEC Corporation. A security vulnerability exists in Online Courseware version 1.0, which can be exploited for cross-site scripting attacks due to the id parameter in the edit.php file...

6.1CVSS4.5AI score0.0057EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/04/07 12:00 a.m.•15 views

Online Courseware SQL注入漏洞

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in Online Courseware version 1.0, which originates from an SQL injection attack on the id parameter of the admin/saveedit.php file...

9.8CVSS7AI score0.00756EPSS
SaveExploits1References5
Rows per page
Query Builder