Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:25 a.m.1 views

CVE-2023-4407

A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4. Affected by this vulnerability is an unknown functionality of the file /portal/reports/accountstatement of the component POST Request Handler. The manipulation of the argument date1/date2 leads to sql injection. The...

9.8CVSS8.2AI score0.00073EPSS
Exploits4References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-54270

Malicious code in bioql PyPI...

9.8CVSS6.9AI score0.00073EPSS
Exploits4References3
NVD
NVD
added 2023/08/18 1:15 p.m.9 views

CVE-2023-4407

A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4. Affected by this vulnerability is an unknown functionality of the file /portal/reports/accountstatement of the component POST Request Handler. The manipulation of the argument date1/date2 leads to sql injection. The...

9.8CVSS7.5AI score0.00073EPSS
Exploits4References3
OSV
OSV
added 2023/08/18 1:15 p.m.0 views

CVE-2023-4407

A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4. Affected by this vulnerability is an unknown functionality of the file /portal/reports/accountstatement of the component POST Request Handler. The manipulation of the argument date1/date2 leads to sql injection. The...

9.8CVSS5.8AI score
Exploits0References3
Prion
Prion
added 2023/08/18 1:15 p.m.10 views

Sql injection

A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4. Affected by this vulnerability is an unknown functionality of the file /portal/reports/accountstatement of the component POST Request Handler. The manipulation of the argument date1/date2 leads to sql injection. The...

6.5CVSS9.8AI score0.00073EPSS
Exploits4References3Affected Software1
CVE
CVE
added 2023/08/18 1:0 p.m.34 views

CVE-2023-4407

CVE-2023-4407 affects Codecanyon Credit Lite 1.5.4. The vulnerability resides in the POST /portal/reports/account_statement endpoint, where manipulated date1/date2 parameters enable SQL injection. Exploitation is described as remotely possible via the affected endpoint; multiple sources corrobora...

9.8CVSS8.3AI score0.00073EPSS
Exploits4References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/18 12:0 a.m.2 views

PT-2023-29086 · Unknown · Codecanyon Credit Lite

Name of the Vulnerable Software and Affected Versions: Codecanyon Credit Lite version 1.5.4 Description: A critical vulnerability was found in the component POST Request Handler, specifically in the file /portal/reports/account statement. The manipulation of the date1 and date2 arguments leads to...

9.8CVSS7.2AI score0.00073EPSS
Exploits4References8
CNNVD
CNNVD
added 2023/08/18 12:0 a.m.3 views

Codecanyon Credit Lite SQL注入漏洞

Codecanyon Credit Lite is a multi-branch loan and savings management system from Codecanyon Corporation. A SQL injection vulnerability exists in Codecanyon Credit Lite version 1.5.4, which stems from the parameter date1/date2 of /portal/reports/accountstatement that could lead to SQL injection...

9.8CVSS7.2AI score0.00073EPSS
Exploits4References5
Rows per page
Query Builder