Lucene search
+L

121 matches found

CVE
CVE
•added 2024/02/23 7:00 p.m.•107 views

CVE-2024-1831

CVE-2024-1831 affects SourceCodester Complete File Management System 1.0, with the login form in users/index.php vulnerable to SQL injection via the username parameter (example payload torada%27+or+%271%27+%3D+%271%27+--+-). The vulnerability can be exploited remotely and has been publicly disclo...

9.8CVSS7.5AI score0.00731EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/23 12:00 a.m.•2 views

CVE-2024-1831: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Complete File Management System 1.0. Affected is an unknown function of the file users/index.php of the component Login Form. The manipulation of the argument username with the input torada%27+or+%271%27+%3D+%271%27+--...

9.8CVSS5.5AI score0.00731EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/02/23 12:00 a.m.•19 views

Complete File Management System SQL Injection Vulnerability

Complete File Management System is a file management system by nelzkie15 Personal Developer. A SQL injection vulnerability exists in SourceCodester Complete File Management System version 1.0, which originates from a SQL injection vulnerability in the users/index.php file of the component Login...

9.8CVSS8.1AI score0.00731EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/23 12:00 a.m.•2 views

CVE-2024-1832: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Complete File Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ of the component Admin Login Form. The manipulation of the argument username with the input...

9.8CVSS5.5AI score0.00881EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/01/13 1:20 p.m.•13 views

CVE-2022-3693

Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal. This issue affects FileOrbis File Management System: from unspecified before 10.6.3...

7.5CVSS7.1AI score0.00697EPSS
SaveExploits0References3
OSV
OSV
•added 2023/01/13 8:15 a.m.•13 views

CVE-2022-3693

Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal.This issue affects FileOrbis File Management System: from unspecified before 10.6.3...

7.5CVSS5.8AI score0.00697EPSS
SaveExploits0References1
Prion
Prion
•added 2023/01/13 8:15 a.m.•28 views

Path traversal

Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal.This issue affects FileOrbis File Management System: from unspecified before 10.6.3...

5CVSS7.6AI score0.00697EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/01/13 12:00 a.m.•83 views

CVE-2022-3693

CVE-2022-3693 affects Deytek Informatics FileOrbis File Management System (versions prior to 10.6.3). The vulnerability is a path traversal/local file inclusion issue that allows unauthenticated access to sensitive files due to improper input handling. Severity indicators in sources assign a high...

7.5CVSS7.1AI score0.00697EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2023/01/13 12:00 a.m.•14 views

FileOrbis File Management System 路径遍历漏洞

FileOrbis File Management System is a file server management product from FileOrbis, Inc. A path traversal vulnerability exists in FileOrbis File Management System versions prior to 10.6.3, which stems from an unauthenticated local file inclusion and path traversal vulnerability in the file...

7.5CVSS7.3AI score0.00697EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/13 12:00 a.m.•2 views

CVE-2022-3693: Path Traversal: '.../...//'

Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal. This issue affects FileOrbis File Management System: from unspecified before 10.6.3...

7.5CVSS5.8AI score0.00697EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2023/01/13 12:00 a.m.•43 views

CVE-2022-3693 Path traversal in FileOrbis File Management System

Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal. This issue affects FileOrbis File Management System: from unspecified before 10.6.3...

7.5CVSS7.8AI score0.00697EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/01/13 12:00 a.m.•15 views

CVE-2022-3693 Path traversal in FileOrbis File Management System

Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal. This issue affects FileOrbis File Management System: from unspecified before 10.6.3...

7.5CVSS7.1AI score0.00697EPSS
SaveExploits0References2
CNVD
CNVD
•added 2022/06/27 12:00 a.m.•63 views

School File Management System Cross-Site Scripting Vulnerability (CNVD-2022-76506)

School File Management System is a school file management system that stores student files individually and retrieves them later. A cross-site scripting vulnerability exists in School File Management System version 1.0, which can be exploited to cause cross-site scripting attacks via the Lastname...

3.5CVSS2.6AI score0.00921EPSS
SaveExploits0Affected Software1
attackerkb
attackerkb
•added 2022/06/23 5:15 p.m.•11 views

CVE-2021-46824

Cross Site Scripting XSS vulnerability in sourcecodester School File Management System 1.0 via the Lastname parameter to the Update Account form in studentprofile.php...

5.4CVSS5.9AI score0.00921EPSS
SaveExploits0References4
NVD
NVD
•added 2022/06/23 5:15 p.m.•25 views

CVE-2021-29055

Cross Site Scripting XSS vulnerability in sourcecodester School File Management System 1.0 via the Firtstname parameter to the Update Account form in studentprofile.php...

6.1CVSS0.00898EPSS
SaveExploits1References2
NVD
NVD
•added 2022/06/23 5:15 p.m.•25 views

CVE-2021-46824

Cross Site Scripting XSS vulnerability in sourcecodester School File Management System 1.0 via the Lastname parameter to the Update Account form in studentprofile.php...

5.4CVSS0.00921EPSS
SaveExploits0References3
Prion
Prion
•added 2022/06/23 5:15 p.m.•17 views

Cross site scripting

Cross Site Scripting XSS vulnerability in sourcecodester School File Management System 1.0 via the Firtstname parameter to the Update Account form in studentprofile.php...

4.3CVSS6AI score0.00898EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/06/23 2:36 p.m.•41 views

CVE-2021-46824

Cross Site Scripting XSS vulnerability in sourcecodester School File Management System 1.0 via the Lastname parameter to the Update Account form in studentprofile.php...

5.5AI score0.00921EPSS
SaveExploits0References3
CVE
CVE
•added 2022/06/23 2:36 p.m.•64 views

CVE-2021-46824

The CVE-2021-46824 entry describes a Cross Site Scripting (XSS) vulnerability in the Sourcecodester School File Management System 1.0, exploitable via the Lastname parameter in the Update Account form (student_profile.php). Affected component: Update Account on School File Management System 1.0; ...

5.4CVSS5.2AI score0.00921EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2022/06/23 2:36 p.m.•75 views

CVE-2021-29055

The CVE-2021-29055 entry documents a Cross Site Scripting (XSS) vulnerability in Sourcecodester’s School File Management System 1.0, exploitable via the Firstname parameter in the Update Account form on student_profile.php. The affected component is the Update Account workflow, specifically the F...

6.1CVSS5.9AI score0.00898EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder