Lucene search
+L

94 matches found

CNNVD
CNNVD
•added 2024/08/06 12:00 a.m.•17 views

School Event Management System 跨站脚本漏洞

School Event Management System is a school event management system. A cross-site scripting vulnerability exists in School Event Management System version 1.0. An attacker can create a specially crafted URL and send it to a victim to obtain their session details via the "view" parameter in...

7.1CVSS6.1AI score0.00253EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/08/06 12:00 a.m.•14 views

School Event Management System 安全漏洞

School Event Management System is a school event management system. A security vulnerability exists in School Event Management System version 1.0. The vulnerability can be exploited to send a specially crafted JavaScript load to a user to take over their browser session via the "id" and "view in...

7.1CVSS6.7AI score0.00253EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/08/06 12:00 a.m.•17 views

School Event Management System 跨站脚本漏洞

School Event Management System is a school event management system. A cross-site scripting vulnerability exists in School Event Management System version 1.0. An attacker can create a specially crafted URL and send it to a victim to obtain their session details via the "view" parameter in...

7.1CVSS6.1AI score0.00253EPSS
SaveExploits0References2
OSV
OSV
•added 2024/04/10 12:15 a.m.•25 views

CVE-2024-3524

A vulnerability, which was classified as problematic, has been found in Campcodes Online Event Management System 1.0. This issue affects some unknown processing of the file /views/process.php. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotel...

5.4CVSS4AI score0.00494EPSS
SaveExploits1References4
OSV
OSV
•added 2024/04/09 11:15 p.m.•14 views

CVE-2024-3522

A vulnerability classified as critical has been found in Campcodes Online Event Management System 1.0. This affects an unknown part of the file /api/process.php. The manipulation of the argument userId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

8.8CVSS5.7AI score0.00675EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•18 views

PT-2024-26384

Name of the Vulnerable Software and Affected Versions Campcodes Online Event Management System version 1.0 Description A critical issue has been discovered, affecting the /api/process.php file. The manipulation of the userId argument leads to sql injection, allowing remote attacks. The issue has...

8.8CVSS6.5AI score0.00675EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•14 views

Campcodes Online Event Management System SQL注入漏洞

Campcodes Online Event Management System is an online event management system from Campcodes, Inc. A SQL injection vulnerability exists in Campcodes Online Event Management System version 1.0, which originates from unknown code in /views/index.php that causes SQL injection via a parameter ID...

8.8CVSS7.1AI score0.00675EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•20 views

Campcodes Online Event Management System 跨站脚本漏洞

Campcodes Online Event Management System is an online event management system from Campcodes, Inc. A cross-site scripting vulnerability exists in Campcodes Online Event Management System version 1.0, which originates from unknown processing in /views/process.php that results in cross-site scripti...

5.4CVSS4.6AI score0.00494EPSS
SaveExploits1References2
OSV
OSV
•added 2023/01/07 10:15 p.m.•14 views

CVE-2022-1102

A vulnerability classified as problematic has been found in SourceCodester Royale Event Management System 1.0. Affected is an unknown function of the file /royalevent/companyprofile.php. The manipulation of the argument companyname/regno/companyaddress/companyemail leads to cross site scripting. ...

6.1CVSS4AI score0.00657EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/01/07 12:00 a.m.•13 views

Event Management System 跨站脚本漏洞

Event Management System is an event management system. A cross-site scripting XSS vulnerability exists in SourceCodester Royale Event Management System version 1.0, which originates from an unknown function in the file /royalevent/companyprofile.php, where manipulation of the parameters...

6.1CVSS3.9AI score0.00657EPSS
SaveExploits0References4
CNVD
CNVD
•added 2022/10/13 12:00 a.m.•107 views

Microsoft Windows COM Event System Service privilege elevation vulnerability

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA.An elevation of privilege vulnerability exists in the Microsoft Windows COM Event System Service, which stems from improper privilege assignment in applications and can be exploited by attackers to...

5.5AI score0.01696EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2022/10/11 7:15 p.m.•7 views

CVE-2022-41033

Windows COM+ Event System Service Elevation of Privilege Vulnerability...

7.8CVSS5.8AI score0.01696EPSS
SaveExploits0References3
Prion
Prion
•added 2022/10/11 7:15 p.m.•37 views

Privilege escalation

Windows COM+ Event System Service Elevation of Privilege Vulnerability...

4.3CVSS8AI score0.01696EPSS
SaveExploits0References1Affected Software5
Microsoft CVE
Microsoft CVE
•added 2022/10/11 7:00 a.m.•112 views

Windows COM+ Event System Service Elevation of Privilege Vulnerability

...

7.8CVSS8.3AI score0.01696EPSS
SaveExploits0
Cvelist
Cvelist
•added 2022/10/11 12:00 a.m.•75 views

CVE-2022-41033 Windows COM+ Event System Service Elevation of Privilege Vulnerability

...

7.8CVSS8.3AI score0.01696EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/10/11 12:00 a.m.•26 views

Microsoft Windows 安全漏洞

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA.An elevation of privilege vulnerability exists in the Microsoft Windows COM Event System Service, which stems from improper privilege assignment in applications and can be exploited by attackers to...

7.8CVSS6.9AI score0.01696EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/10/11 12:00 a.m.•8 views

PT-2022-5402 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a privilege escalation vulnerability in the Microsoft Windows COM+ Event System Service. It is caused by a buffer overflow in memory, which can be exploite...

7.8CVSS9.5AI score0.01696EPSS
SaveExploits0References17
VulnCheck KEV
VulnCheck KEV
•added 2022/10/11 12:00 a.m.•6 views

VulnCheck KEV: CVE-2022-41033

Microsoft Windows COM+ Event System Service contains an unspecified vulnerability that allows for privilege escalation...

7.8CVSS7.3AI score0.01696EPSS
SaveIn wildExploits0References5
attackerkb
attackerkb
•added 2022/10/11 12:00 a.m.•51 views

CVE-2022-41033

Windows COM+ Event System Service Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

7.8CVSS7.7AI score0.01696EPSS
SaveIn wildExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/11 12:00 a.m.•2 views

CVE-2022-41033: Access of Resource Using Incompatible Type

Windows COM+ Event System Service Elevation of Privilege Vulnerability...

7.8CVSS7.7AI score0.01696EPSS
SaveExploits0References2
Rows per page
Query Builder