Lucene search
+L

385 matches found

Positive Technologies
Positive Technologies
added 2024/09/11 12:0 a.m.5 views

PT-2024-39189 · Sourcecodester · Sourcecodester Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best House Rental Management System version 1.0 Description: A critical vulnerability has been found in the system. The issue affects the function delete user/save user of the file /admin class.php. The manipulation of the...

8.8CVSS7.4AI score0.00601EPSS
SaveExploits1References11
OSV
OSV
added 2024/08/20 1:15 p.m.6 views

CVE-2024-42583

A Cross-Site Request Forgery CSRF in the component deleteuser.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

8.8CVSS5.8AI score0.0029EPSS
SaveExploits1References1
NVD
NVD
added 2024/08/20 1:15 p.m.21 views

CVE-2024-42583

A Cross-Site Request Forgery CSRF in the component deleteuser.php of Warehouse Inventory System v2.0 allows attackers to escalate privileges...

8.8CVSS0.0029EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/08/20 12:0 a.m.13 views

PT-2024-30045 · Unknown · Warehouse Inventory System

Name of the Vulnerable Software and Affected Versions: Warehouse Inventory System version 2.0 Description: A Cross-Site Request Forgery CSRF issue in the delete user.php component allows attackers to escalate privileges, potentially leading to unauthorized user deletion. Recommendations: For...

8.8CVSS7.6AI score0.0029EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/08/20 12:0 a.m.7 views

Warehouse Inventory System 安全漏洞

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deleteuser.php component not adequately verifying that a request comes from a truste...

8.8CVSS6.8AI score0.0029EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/08/03 2:31 p.m.49 views

CVE-2024-7437 SimpleMachines SMF Delete User index.php resource injection

A vulnerability, which was classified as critical, was found in SimpleMachines SMF 2.1.4. Affected is an unknown function of the file /index.php?action=profile;u=2;area=showalerts;do=remove of the component Delete User Handler. The manipulation of the argument aid leads to improper control of...

5.5CVSS0.00442EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/08/03 2:31 p.m.25 views

CVE-2024-7437 SimpleMachines SMF Delete User index.php resource injection

A vulnerability, which was classified as critical, was found in SimpleMachines SMF 2.1.4. Affected is an unknown function of the file /index.php?action=profile;u=2;area=showalerts;do=remove of the component Delete User Handler. The manipulation of the argument aid leads to improper control of...

5.5CVSS5.7AI score0.00442EPSS
SaveExploits1References4
OSV
OSV
added 2024/08/03 2:31 p.m.21 views

CVE-2024-7437 SimpleMachines SMF Delete User index.php resource injection

A vulnerability, which was classified as critical, was found in SimpleMachines SMF 2.1.4. Affected is an unknown function of the file /index.php?action=profile;u=2;area=showalerts;do=remove of the component Delete User Handler. The manipulation of the argument aid leads to improper control of...

5.3CVSS5.6AI score0.00442EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/08/03 12:0 a.m.8 views

PT-2024-38347 · Simple Machines · Simplemachines Smf

Name of the Vulnerable Software and Affected Versions: SimpleMachines SMF version 2.1.4 Description: A critical issue was found in the Delete User Handler component, specifically in the file /index.php?action=profile;u=2;area=showalerts;do=remove. The manipulation of the aid argument leads to...

5.5CVSS6AI score0.00442EPSS
SaveExploits1References9
BDU FSTEC
BDU FSTEC
added 2024/07/23 12:0 a.m.6 views

The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software, related to deficiencies in authentication procedures, allows attackers to delete user accounts.

The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to delete user accounts...

5.3CVSS5.5AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2024/07/02 8:15 a.m.5 views

CVE-2024-5545

The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stmeditdeleteusercar function in all versions up to, and including, 1.4.8. This makes it possible for unauthenticated attackers to...

5.3CVSS6AI score0.0033EPSS
SaveExploits0References3
OSV
OSV
added 2024/06/30 11:15 p.m.5 views

CVE-2024-6417

A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php?action=deleteuser. The manipulation of the argument id leads to sql injection. The attack may be launched...

7.5CVSS6.5AI score0.00453EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/06/30 10:31 p.m.25 views

CVE-2024-6417 SourceCodester Simple Online Bidding System sql injection

A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php?action=deleteuser. The manipulation of the argument id leads to sql injection. The attack may be launched...

6.5CVSS0.00453EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/06/30 12:0 a.m.8 views

Simple Online Bidding System SQL Injection Vulnerability

Simple Online Bidding System is an online bidding system by oretnom23 individual developer. SourceCodester Simple Online Bidding System version 1.0 suffers from a SQL injection vulnerability that originates from the parameter id of the file /admin/ajax.php?action=deleteuser which can lead to SQL...

7.5CVSS8AI score0.00453EPSS
SaveExploits1References5
CVE
CVE
added 2024/06/13 11:26 a.m.164 views

CVE-2024-34116

Adobe Creative Cloud Desktop (Windows/macOS) versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that can allow loading and executing malicious libraries, potentially resulting in arbitrary file deletion and a security feature bypass. Exploitation requ...

7.1CVSS7AI score0.00298EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.5 views

College Management System SQL注入漏洞

College Management System is a simple project organized by Code Projects. It is used to keep track of students, teachers, subjects, schedules and all things related to the university. College Management System version 1.0 has a SQL injection vulnerability that stems from a SQL injection...

8.8CVSS7.1AI score0.00803EPSS
SaveExploits1References6
OSV
OSV
added 2023/12/01 10:15 p.m.4 views

CVE-2023-6462

A vulnerability, which was classified as problematic, was found in SourceCodester User Registration and Login System 1.0. Affected is an unknown function of the file /endpoint/delete-user.php. The manipulation of the argument user leads to cross site scripting. It is possible to launch the attack...

6.1CVSS4AI score0.00608EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/12/01 12:0 a.m.7 views

PT-2023-32675 · Sourcecodester · Sourcecodester User Registration/Login System

Name of the Vulnerable Software and Affected Versions: SourceCodester User Registration and Login System version 1.0 Description: A problematic issue was found in the system, affecting an unknown function of the file /endpoint/delete-user.php. The manipulation of the user argument leads to...

6.1CVSS4.4AI score0.00608EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/12/01 12:0 a.m.10 views

SourceCodester User Registration and Login System Cross-Site Scripting Vulnerability

User Registration and Login System is a user registration and login system by Remy Andrade, an individual developer. A cross-site scripting vulnerability exists in the SourceCodester User Registration and Login System, which is caused by cross-site scripting in the user parameter of...

6.1CVSS6.2AI score0.00608EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/11/27 12:0 a.m.6 views

PT-2023-32612 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Loan Management System version 1.0 Description: A critical issue has been found in the Users Page component, specifically in the delete user function of the deleteUser.php file. The manipulation of the user id argument leads to...

7.2CVSS8.3AI score0.00763EPSS
SaveExploits1References6
Rows per page
Query Builder