Lucene search
K

933 matches found

OSV
OSV
added 2024/03/05 8:16 p.m.2 views

CVE-2024-2055

The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user...

9.8CVSS5.8AI score0.00933EPSS
Exploits3References2
CVE
CVE
added 2024/03/05 6:56 p.m.81 views

CVE-2024-2055

The Artica Proxy vulnerability CVE-2024-2055 involves the Rich Filemanager feature. When enabled, it does not require authentication and runs as root, exposing an unauthenticated web interface on port 5000/tcp. An attacker can gain complete filesystem access and could modify critical files (e.g.,...

9.8CVSS9.7AI score0.00933EPSS
Exploits3References2Affected Software1
Penetration Testing Lab
Penetration Testing Lab
added 2024/03/05 7:54 a.m.16 views

Persistence – Explorer

Windows File Explorer is the is the graphical file management utility for the Windows operating system and the default desktop environment. Windows explorer was introduced… Continue reading - Persistence - Explorer...

7.4AI score
Exploits0
Penetration Testing Lab
Penetration Testing Lab
added 2024/03/05 7:54 a.m.18 views

Persistence – Explorer

Windows File Explorer is the is the graphical file management utility for the Windows operating system and the default desktop environment. Windows explorer was introduced… Continue reading - Persistence - Explorer...

7.4AI score
Exploits0
OSV
OSV
added 2024/02/23 8:15 p.m.4 views

CVE-2024-1832

A vulnerability has been found in SourceCodester Complete File Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ of the component Admin Login Form. The manipulation of the argument username with the input...

9.8CVSS5.7AI score
Exploits0References3
NVD
NVD
added 2024/02/23 8:15 p.m.15 views

CVE-2024-1832

A vulnerability has been found in SourceCodester Complete File Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ of the component Admin Login Form. The manipulation of the argument username with the input...

9.8CVSS7.5AI score0.00881EPSS
Exploits1References3
Prion
Prion
added 2024/02/23 8:15 p.m.20 views

Sql injection

A vulnerability has been found in SourceCodester Complete File Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ of the component Admin Login Form. The manipulation of the argument username with the input...

7.5CVSS7.7AI score0.00881EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/02/23 7:31 p.m.37 views

CVE-2024-1832 SourceCodester Complete File Management System Admin Login Form sql injection

A vulnerability has been found in SourceCodester Complete File Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ of the component Admin Login Form. The manipulation of the argument username with the input...

7.5CVSS7.8AI score0.00881EPSS
Exploits1References3
CVE
CVE
added 2024/02/23 7:31 p.m.87 views

CVE-2024-1832

The CVE-2024-1832 entry concerns SourceCodester Complete File Management System 1.0, where the Admin Login Form’s /admin/ functionality is vulnerable to SQL injection via the username parameter (example payload shown in sources). The root cause is an injectable username input that allows remote e...

9.8CVSS7.5AI score0.00881EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/23 7:31 p.m.16 views

CVE-2024-1832 SourceCodester Complete File Management System Admin Login Form sql injection

A vulnerability has been found in SourceCodester Complete File Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ of the component Admin Login Form. The manipulation of the argument username with the input...

7.5CVSS7.6AI score0.00881EPSS
Exploits1References3
OSV
OSV
added 2024/02/23 7:15 p.m.2 views

CVE-2024-1831

A vulnerability, which was classified as critical, was found in SourceCodester Complete File Management System 1.0. Affected is an unknown function of the file users/index.php of the component Login Form. The manipulation of the argument username with the input torada%27+or+%271%27+%3D+%271%27+--...

9.8CVSS5.7AI score0.00731EPSS
Exploits1References3
Prion
Prion
added 2024/02/23 7:15 p.m.15 views

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Complete File Management System 1.0. Affected is an unknown function of the file users/index.php of the component Login Form. The manipulation of the argument username with the input torada%27+or+%271%27+%3D+%271%27+--...

7.5CVSS7.7AI score0.00731EPSS
Exploits1References3
CVE
CVE
added 2024/02/23 7:0 p.m.90 views

CVE-2024-1831

CVE-2024-1831 affects SourceCodester Complete File Management System 1.0, with the login form in users/index.php vulnerable to SQL injection via the username parameter (example payload torada%27+or+%271%27+%3D+%271%27+--+-). The vulnerability can be exploited remotely and has been publicly disclo...

9.8CVSS7.5AI score0.00731EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/23 7:0 p.m.29 views

CVE-2024-1831 SourceCodester Complete File Management System Login Form index.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Complete File Management System 1.0. Affected is an unknown function of the file users/index.php of the component Login Form. The manipulation of the argument username with the input torada%27+or+%271%27+%3D+%271%27+--...

7.5CVSS7.4AI score0.00731EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/02/23 7:0 p.m.36 views

CVE-2024-1831 SourceCodester Complete File Management System Login Form index.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Complete File Management System 1.0. Affected is an unknown function of the file users/index.php of the component Login Form. The manipulation of the argument username with the input torada%27+or+%271%27+%3D+%271%27+--...

7.5CVSS7.8AI score0.00731EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/02/23 12:0 a.m.5 views

PT-2024-18347 · Sourcecodester · Sourcecodester Complete File Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Complete File Management System version 1.0 Description: A critical vulnerability has been found in the Admin Login Form component of the file /admin/. The manipulation of the username argument with a specific input leads to SQ...

9.8CVSS7.8AI score0.00881EPSS
Exploits1References8
CNNVD
CNNVD
added 2024/02/23 12:0 a.m.3 views

SourceCodester Complete File Management System SQL Injection Vulnerability

Complete File Management System is a file management system by nelzkie15 Personal Developer. A SQL injection vulnerability exists in SourceCodester Complete File Management System version 1.0, which originates from a SQL injection vulnerability in the file /admin/ of the component admin Login For...

9.8CVSS8AI score0.00881EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/02/23 12:0 a.m.9 views

Complete File Management System SQL Injection Vulnerability

Complete File Management System is a file management system by nelzkie15 Personal Developer. A SQL injection vulnerability exists in SourceCodester Complete File Management System version 1.0, which originates from a SQL injection vulnerability in the users/index.php file of the component Login...

9.8CVSS8.1AI score0.00731EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/02/23 12:0 a.m.4 views

PT-2024-18346 · Sourcecodester · Sourcecodester Complete File Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Complete File Management System version 1.0 Description: A critical issue was found in the Login Form component of the affected software, specifically in the file users/index.php. The username argument is vulnerable to...

9.8CVSS7.7AI score0.00731EPSS
Exploits1References8
GithubExploit
GithubExploit
added 2024/01/30 4:2 p.m.9 views

Exploit for CVE-2024-22890

CVE List CVE-2024-22890: My e-Diary App - Cross-Site-Script...

9.8CVSS6.3AI score0.01159EPSS
Exploits16
Rows per page
Query Builder