Lucene search
+L

1494 matches found

attackerkb
attackerkb
•added 2023/12/29 10:15 p.m.•22 views

CVE-2023-50071

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...

8.8CVSS7.4AI score0.13754EPSS
SaveExploits6References4
NVD
NVD
•added 2023/12/29 10:15 p.m.•28 views

CVE-2023-50071

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...

8.8CVSS0.13754EPSS
SaveExploits6References2
attackerkb
attackerkb
•added 2023/12/29 10:15 p.m.•11 views

CVE-2023-50070

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...

8.8CVSS7.4AI score0.00786EPSS
SaveExploits2References4
OSV
OSV
•added 2023/12/29 10:15 p.m.•22 views

CVE-2023-50070

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...

8.8CVSS5.8AI score0.00786EPSS
SaveExploits2References2
Prion
Prion
•added 2023/12/29 10:15 p.m.•24 views

Sql injection

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...

6.5CVSS8.5AI score0.13754EPSS
SaveExploits6References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/12/29 12:00 a.m.•15 views

CVE-2023-50071

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...

8.5AI score0.13754EPSS
SaveExploits6References2
Positive Technologies
Positive Technologies
•added 2023/12/29 12:00 a.m.•5 views

PT-2023-31467

Name of the Vulnerable Software and Affected Versions Sourcecodester Customer Support System version 1.0 Description The issue concerns multiple SQL injection vulnerabilities in the /customer support/ajax.php?action=save ticket endpoint via department id, customer id, and subject. This allows for...

8.8CVSS5.7AI score0.00786EPSS
SaveExploits2References10
Krebs on Security
Krebs on Security
•added 2023/12/19 10:49 p.m.•32 views

BlackCat Ransomware Raises Ante After FBI Disruption

The U.S. Federal Bureau of Investigation FBI disclosed today that it infiltrated the worlds second most prolific ransomware gang, a Russia-based criminal group known as ALPHV and BlackCat. The FBI said it seized the gangs darknet website, and released a decryption tool that hundreds of victim...

7.3AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2023/12/16 11:06 p.m.•64 views

Exploit for SQL Injection in Customer_Support_System_Project Customer_Support_System

CVE-2023-50071 Customer Support System 1.0 - Multiple SQL in...

8.8CVSS9.4AI score0.13754EPSS
SaveExploits6
GithubExploit
GithubExploit
•added 2023/12/15 8:37 p.m.•87 views

Exploit for SQL Injection in Oretnom23 Customer_Support_System

CVE-2023-50070 Customer Support System 1.0 - Multiple SQL in...

8.8CVSS9.8AI score0.00786EPSS
SaveExploits2
Krebs on Security
Krebs on Security
•added 2023/12/14 5:51 p.m.•64 views

Ten Years Later, New Clues in the Target Breach

On Dec. 18, 2013, KrebsOnSecurity broke the news that U.S. retail giant Target was battling a wide-ranging computer intrusion that compromised more than 40 million customer payment cards over the previous month. The malware used in the Target breach included the text string "Rescator," which also...

7.1AI score
SaveExploits0
Veracode
Veracode
•added 2023/12/13 5:52 a.m.•23 views

Cross-site Scripting (XSS)

jfinal is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the modal management department of the library, allowing an attacker to inject and execute malicious JavaScript...

5.4CVSS6.5AI score0.00417EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/12/08 3:15 p.m.•24 views

Cross site scripting

Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting XSS vulnerability in the article management department...

4.9CVSS6.3AI score0.00434EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/12/08 3:15 p.m.•31 views

Cross site scripting

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the model management department...

4.9CVSS6.2AI score0.00417EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2023/12/08 12:00 a.m.•2 views

CVE-2023-49487

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...

5.4CVSS0.00413EPSS
SaveExploits0References4
CVE
CVE
•added 2023/12/08 12:00 a.m.•76 views

CVE-2023-49485

CVE-2023-49485 concerns JFinalCMS v5.0.0, with a cross-site scripting (XSS) vulnerability in the column management department. The original description and connected documents consistently identify the affected software as JFinalCMS v5.0.0 and attribute the issue to inadequate filtering/escaping ...

5.4CVSS5.2AI score0.00413EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/08 12:00 a.m.•3 views

CVE-2023-49486: Improper Neutralization of Input During Web Page Generation

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the model management department...

5.4CVSS5.8AI score0.00417EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/08 12:00 a.m.•4 views

CVE-2023-49487: Improper Neutralization of Input During Web Page Generation

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...

5.4CVSS5.8AI score0.00413EPSS
SaveExploits0References2
Mend
Mend
•added 2023/12/08 12:00 a.m.•4 views

CVE-2023-49486

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the model management department...

5.4CVSS0.00417EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/08 12:00 a.m.•5 views

CVE-2023-49484: Improper Neutralization of Input During Web Page Generation

Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting XSS vulnerability in the article management department...

5.4CVSS5.8AI score0.00434EPSS
SaveExploits1References2
Rows per page
Query Builder