Lucene search
+L

1624 matches found

Prion
Prion
added 2022/02/28 2:15 p.m.19 views

Cross site scripting

Car Driving School Management System v1.0 is affected by Cross Site Scripting XSS in the User Enrollment Form Username Field. To exploit this Vulnerability, an admin views the registered user details...

4.3CVSS6AI score0.00641EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/02/28 1:14 p.m.39 views

CVE-2022-24572

Car Driving School Management System v1.0 is affected by Cross Site Scripting XSS in the User Enrollment Form Username Field. To exploit this Vulnerability, an admin views the registered user details...

6.2AI score0.00641EPSS
SaveExploits1References1
CVE
CVE
added 2022/02/28 1:14 p.m.104 views

CVE-2022-24572

Car Driving School Management System v1.0 contains a Cross Site Scripting (XSS) vulnerability in the User Enrollment Form Username Field. The weakness allows client‑side code execution when an admin views registered user details. Root cause cited in sources is inadequate input filtering/validatio...

6.1CVSS6AI score0.00641EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/02/28 12:00 a.m.18 views

Car Driving School Management System 跨站脚本漏洞

A cross-site scripting vulnerability exists in Car Driving School Management System, a driving school management system, which stems from the fact that the product's User Enrollment Form does not effectively filter user input data and can be exploited by attackers to The vulnerability causes...

6.1CVSS5.8AI score0.00641EPSS
SaveExploits1References2
Microsoft KB
Microsoft KB
added 2022/02/15 12:00 a.m.109 views

February 15, 2022—KB5010427 (OS Build 17763.2628) Preview

None None...

6.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.17 views

The vulnerability of the online enrollment management system for students and learners lies in errors when processing the “Name” parameter on the “Add-Users” page. This allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Online Enrollment Management System for students and learners is related to errors in processing the “Name” parameter on the “Add-Users” page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS5.6AI score0.01635EPSS
SaveExploits4References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/12/28 12:15 p.m.9 views

CVE-2021-40579

https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 is affected by: Incorrect Access Control. The impact is: gain privileges remote...

6.5CVSS6.7AI score0.00843EPSS
SaveExploits0References4
OSV
OSV
added 2021/12/28 12:15 p.m.12 views

CVE-2021-40579

https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 is affected by: Incorrect Access Control. The impact is: gain privileges remote...

6.5CVSS6.7AI score0.00843EPSS
SaveExploits0References2
NVD
NVD
added 2021/12/28 12:15 p.m.28 views

CVE-2021-40579

https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 is affected by: Incorrect Access Control. The impact is: gain privileges remote...

6.5CVSS0.00843EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/12/28 11:59 a.m.32 views

CVE-2021-40579

https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 is affected by: Incorrect Access Control. The impact is: gain privileges remote...

7.1AI score0.00843EPSS
SaveExploits0References2
CVE
CVE
added 2021/12/28 11:59 a.m.72 views

CVE-2021-40579

The CVE-2021-40579 entry concerns the PayPal Free Source Code Online Enrollment Management System in PHP (version 1.0) and related components, affected by Incorrect Access Control. The underlying impact is remote privilege gain through improper privilege validation when obtaining PHP and PayPal F...

6.5CVSS6.8AI score0.00843EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2021/12/27 12:00 a.m.32 views

Online Enrollment Management System SQL Injection Vulnerability

Online Enrollment Management System is an open source online enrollment management system. Online Enrollment Management System version 1.0 contains a SQL injection vulnerability that stems from the lack of effective filtering and escaping of the id parameter, which could be exploited to retrieve...

7.5CVSS2.6AI score0.01214EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/23 1:15 p.m.14 views

CVE-2021-44599

The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. A crafted payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted with...

7.5CVSS7.1AI score0.01214EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/23 1:15 p.m.20 views

CVE-2021-44599

The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. A crafted payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted with...

7.5CVSS0.01214EPSS
SaveExploits1References1
Prion
Prion
added 2021/12/23 1:15 p.m.21 views

Sql injection

The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. A crafted payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted with...

5CVSS7.6AI score0.01214EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/23 12:31 p.m.30 views

CVE-2021-44599

The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. A crafted payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted with...

7.8AI score0.01214EPSS
SaveExploits1References1
CVE
CVE
added 2021/12/23 12:31 p.m.55 views

CVE-2021-44599

CVE-2021-44599 affects Online Enrollment Management System 1.0. The issue is a SQL injection in the id parameter, where a crafted payload can invoke MySQL load_file via a UNC path referencing an external URL, with the app interacting with that domain, indicating query execution. Root cause: lack ...

7.5CVSS7.5AI score0.01214EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/12/23 12:00 a.m.15 views

Online Enrollment Management System SQL注入漏洞

Online Enrollment Management System is an open source online enrollment management system. Online Enrollment Management System version 1.0 contains a SQL injection vulnerability that stems from the lack of effective filtering and escaping of the id parameter, which could be exploited to retrieve...

7.5CVSS5.9AI score0.01214EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/07 10:15 p.m.27 views

CVE-2021-40578

Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive information and execute arbitrary SQL commands via IDNO parameter...

7.2CVSS6AI score0.01477EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/12/07 10:15 p.m.8 views

CVE-2021-40578

Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive information and execute arbitrary SQL commands via IDNO parameter...

7.2CVSS7.4AI score0.01477EPSS
SaveExploits1References5
Rows per page
Query Builder