Lucene search
+L

210 matches found

CNNVD
CNNVD
added 2023/03/29 12:0 a.m.4 views

Earnings and Expense Tracker App 跨站脚本漏洞

Expense Tracker is an expense tracker organized by SourceCode and Projects. A security vulnerability exists in the SourceCodester Earnings and Expense Tracker App version 1.0, which stems from incorrect manipulation of the parameter name resulting in cross-site scripting...

6.1CVSS4.3AI score0.00363EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/03/29 12:0 a.m.37 views

Earnings and Expense Tracker App 跨站脚本漏洞

Expense Tracker is an expense tracker organized by SourceCode and Projects. A security vulnerability exists in the SourceCodester Earnings and Expense Tracker App version 1.0, which stems from incorrect manipulation of the parameter name resulting in cross-site scripting...

6.1CVSS4.3AI score0.00363EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/03/29 12:0 a.m.5 views

PT-2023-17173 · Sourcecodester · Earnings/Expense Tracker App

Name of the Vulnerable Software and Affected Versions: SourceCodester Earnings and Expense Tracker App version 1.0 Description: A problematic issue has been found in the processing of the file "LoginRegistration.php?a=register user". The manipulation of the fullname argument leads to cross-site...

6.1CVSS6.9AI score0.00363EPSS
Exploits0References6
OSV
OSV
added 2022/12/15 7:15 p.m.5 views

CVE-2022-45033

A cross-site scripting XSS vulnerability in Expense Tracker 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat text field...

5.4CVSS5.9AI score0.00465EPSS
Exploits1References1
NVD
NVD
added 2022/12/15 7:15 p.m.21 views

CVE-2022-45033

A cross-site scripting XSS vulnerability in Expense Tracker 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat text field...

5.4CVSS0.00465EPSS
Exploits1References1
Prion
Prion
added 2022/12/15 7:15 p.m.18 views

Cross site scripting

A cross-site scripting XSS vulnerability in Expense Tracker 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat text field...

4.9CVSS5.3AI score0.00465EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/15 12:0 a.m.6 views

CVE-2022-45033

A cross-site scripting XSS vulnerability in Expense Tracker 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat text field...

5.3AI score0.00465EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/12/15 12:0 a.m.26 views

CVE-2022-45033

A cross-site scripting XSS vulnerability in Expense Tracker 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat text field...

5.5AI score0.00465EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/12/15 12:0 a.m.6 views

Expense Tracker 跨站脚本漏洞

Expense Tracker is an expense tracker organized by SourceCode and Projects. A security vulnerability exists in Expense Tracker version 1.0 that originates in cross-site scripting XSS and allows an attacker to execute arbitrary web script or HTML via a crafted payload injected into a chat text fie...

5.4CVSS5.8AI score0.00465EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/12/15 12:0 a.m.7 views

PT-2022-27380 · Unknown · Expense Tracker

Name of the Vulnerable Software and Affected Versions: Expense Tracker version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat text field. Recommendations: For Expense Tracker version 1.0,...

5.4CVSS5.4AI score0.00465EPSS
Exploits1References4
CVE
CVE
added 2022/12/15 12:0 a.m.57 views

CVE-2022-45033

CVE-2022-45033 refers to an XSS vulnerability in Expense Tracker 1.0 that enables an attacker to inject and execute arbitrary web scripts or HTML via the Chat text field. The root cause is improper input sanitization in the Chat field, enabling script execution in the victim’s browser. Affected s...

5.4CVSS5.3AI score0.00465EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2022/01/25 12:0 a.m.17 views

SourceCodester Budget and Expense Tracker System SQL注入漏洞

SourceCodester Budget And Expense Tracker System is a web-based application from Carlo Montero's personal developer. SourceCodester Budget and Expense Tracker System is vulnerable in v1.0 due to a lack of SQL data escaping and filtering in the software. An attacker could use the user name field t...

9.8CVSS4AI score0.02592EPSS
Exploits1References1
NVD
NVD
added 2022/01/21 7:15 p.m.19 views

CVE-2021-40247

SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username field...

9.8CVSS0.02592EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/01/21 7:15 p.m.4 views

CVE-2021-40247

SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username field...

9.8CVSS6.1AI score0.02592EPSS
Exploits1References3
OSV
OSV
added 2022/01/21 7:15 p.m.6 views

CVE-2021-40247

SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username field...

9.8CVSS6.1AI score0.02592EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/01/21 6:58 p.m.28 views

CVE-2021-40247

SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username field...

10AI score0.02592EPSS
Exploits1References2
CVE
CVE
added 2022/01/21 6:58 p.m.64 views

CVE-2021-40247

CVE-2021-40247 affects Sourcecodester Budget and Expense Tracker System v1.0. The vulnerability is an SQL injection via the username field caused by inadequate SQL data escaping/filtering. Exploitation in the wild is not described in the provided documents, but CVSS data indicates a high/critical...

9.8CVSS9.9AI score0.02592EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2021/10/29 5:15 p.m.21 views

CVE-2021-41645

Remote Code Execution RCE vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to inject arbitrary code via the image upload field...

8.8CVSS0.03098EPSS
Exploits1References1
OSV
OSV
added 2021/10/29 5:15 p.m.2 views

CVE-2021-41645

Remote Code Execution RCE vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to inject arbitrary code via the image upload field...

8.8CVSS6.1AI score0.03098EPSS
Exploits1References1
Cvelist
Cvelist
added 2021/10/29 4:59 p.m.23 views

CVE-2021-41645

Remote Code Execution RCE vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to inject arbitrary code via the image upload field...

9.2AI score0.03098EPSS
Exploits1References1
Rows per page
Query Builder