Lucene search
+L

734 matches found

Cvelist
Cvelist
added 2024/02/26 1:00 a.m.36 views

CVE-2024-1878 SourceCodester Employee Management System myprofile.php sql injection

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /myprofile.php. The manipulation of the argument id with the input 1%20or%201=1 leads to sql injection. The attack may be...

6.5CVSS7AI score0.00628EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/02/26 1:00 a.m.45 views

CVE-2024-1877 SourceCodester Employee Management System cancel.php sql injection

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /cancel.php. The manipulation of the argument id with the input 1%20or%201=1 leads to sql injection. The attack can ...

6.5CVSS7AI score0.00628EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/02/26 1:00 a.m.22 views

CVE-2024-1877 SourceCodester Employee Management System cancel.php sql injection

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /cancel.php. The manipulation of the argument id with the input 1%20or%201=1 leads to sql injection. The attack can ...

6.5CVSS6.9AI score0.00628EPSS
SaveExploits0References3
CVE
CVE
added 2024/02/26 1:00 a.m.141 views

CVE-2024-1877

CVE-2024-1877 affects SourceCodester Employee Management System 1.0. The vulnerability resides in the unknown-functionality of /cancel.php where the id parameter is improperly handled, allowing SQL injection when crafted input such as 1%20or%201=1 is supplied. The issue can be exploited remotely ...

8.8CVSS6.8AI score0.00628EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2024/02/26 12:31 a.m.30 views

CVE-2024-1876 SourceCodester Employee Management System psubmit.php sql injection

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /psubmit.php. The manipulation of the argument pid with the input '+or+1%3d1%23 leads to sql injection. It is possible to launch the attack...

7.5CVSS7.8AI score0.00729EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/02/26 12:31 a.m.20 views

CVE-2024-1876 SourceCodester Employee Management System psubmit.php sql injection

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /psubmit.php. The manipulation of the argument pid with the input '+or+1%3d1%23 leads to sql injection. It is possible to launch the attack...

7.5CVSS7.6AI score0.00729EPSS
SaveExploits0References3
CVE
CVE
added 2024/02/26 12:31 a.m.110 views

CVE-2024-1876

CVE-2024-1876 affects SourceCodester Employee Management System 1.0, with a vulnerability in the /psubmit.php file where the pid parameter can be tampered (e.g., '+or+1%3d1%23') to trigger an SQL injection. This allows remote exploitation and has been publicly disclosed. The available connected s...

9.8CVSS7.5AI score0.00729EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/02/26 12:00 a.m.10 views

SourceCodester Employee Management System SQL Injection Vulnerability

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester. A SQL injection vulnerability exists in SourceCodester Employee Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can...

8.8CVSS8AI score0.00628EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/02/26 12:00 a.m.11 views

SourceCodester Employee Management System SQL Injection Vulnerability

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester. A SQL injection vulnerability exists in SourceCodester Employee Management System version 1.0, which stems from an incorrect manipulation of the parameter pid that can...

9.8CVSS8.1AI score0.00729EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/02/26 12:00 a.m.7 views

SourceCodester Employee Management System Cross-Site Scripting Vulnerability

SourceCodester Employee Management System is a php-based employee performance management system from SourceCodester, Inc. A cross-site scripting vulnerability exists in the SourceCodester Employee Management System version 1.0, which stems from a cross-site scripting vulnerability due to incorrec...

5.4CVSS6.1AI score0.00505EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/02/26 12:00 a.m.7 views

SourceCodester Employee Management System Security Vulnerability

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester. A security vulnerability exists in SourceCodester Employee Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead ...

8.8CVSS7.5AI score0.00628EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/02/25 12:00 a.m.14 views

PT-2024-18384 · Sourcecodester · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System version 1.0 Description: A critical issue has been found, affecting an unknown function of the file /psubmit.php. The manipulation of the argument pid with the input '+or+1%3d1%23 leads to SQL...

9.8CVSS8.1AI score0.00729EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2024/02/25 12:00 a.m.10 views

PT-2024-18385 · Unknown · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System version 1.0 Description: A critical issue was found in the SourceCodester Employee Management System, affecting an unknown functionality of the file /cancel.php. The manipulation of the id argument wi...

8.8CVSS8.1AI score0.00628EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/02/25 12:00 a.m.9 views

PT-2024-18386 · Sourcecodester · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /myprofile.php. The manipulation of the id argument with the input 1%20or%201=1 leads to SQL injection. The...

8.8CVSS8.4AI score0.00628EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2024/02/24 9:31 p.m.27 views

CVE-2024-1871 SourceCodester Employee Management System Project Assignment Report assignp.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. Affected is an unknown function of the file /process/assignp.php of the component Project Assignment Report. The manipulation of the argument pname leads to cross site scripting. It i...

4CVSS6.2AI score0.00505EPSS
SaveExploits0References3
CVE
CVE
added 2024/02/24 9:31 p.m.129 views

CVE-2024-1871

CVE-2024-1871 concerns SourceCodester Employee Management System 1.0 — specifically the Project Assignment Report component. The vulnerability exists in the unknown function handling the file /process/assignp.php where the pname argument can be manipulated to trigger a cross-site scripting (XSS) ...

5.4CVSS4AI score0.00505EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2024/02/24 9:31 p.m.34 views

CVE-2024-1871 SourceCodester Employee Management System Project Assignment Report assignp.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. Affected is an unknown function of the file /process/assignp.php of the component Project Assignment Report. The manipulation of the argument pname leads to cross site scripting. It i...

4CVSS4.1AI score0.00505EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/02/24 12:00 a.m.6 views

PT-2024-18379 · Sourcecodester · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System version 1.0 Description: A problematic issue was found in the Project Assignment Report component, specifically in the /process/assignp.php file. The manipulation of the pname argument leads to...

5.4CVSS4.1AI score0.00505EPSS
SaveExploits0References7
OSV
OSV
added 2024/02/23 8:15 p.m.8 views

CVE-2024-1833

A vulnerability was found in SourceCodester Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /Account/login.php. The manipulation of the argument txtusername/txtphone leads to sql injection. The attack may be launched...

9.8CVSS5.8AI score0.00908EPSS
SaveExploits1References5
NVD
NVD
added 2024/02/23 8:15 p.m.39 views

CVE-2024-1833

A vulnerability was found in SourceCodester Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /Account/login.php. The manipulation of the argument txtusername/txtphone leads to sql injection. The attack may be launched...

9.8CVSS7.5AI score0.00908EPSS
SaveExploits1References5
Rows per page
Query Builder