Lucene search
K

205 matches found

OSV
OSV
added 2024/11/14 3:15 p.m.1 views

CVE-2024-50837

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/adminuser.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and username parameters...

5.4CVSS6AI score0.00462EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/11/14 12:0 a.m.14 views

CVE-2024-50834

A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters...

8.2AI score0.0058EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/11/14 12:0 a.m.4 views

PT-2024-34434 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A Stored Cross-Site Scripting XSS issue was discovered in the /admin/teachers.php endpoint, allowing remote attackers to execute arbitrary scripts via the firstname and...

5.4CVSS6.1AI score0.00548EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/11/14 12:0 a.m.3 views

PT-2024-34432 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A SQL Injection issue was discovered in the /admin/teachers.php file of the KASHIPARA E-learning Management System Project. The firstname and lastname parameters are...

7.2CVSS8.1AI score0.0058EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/09/20 12:0 a.m.2 views

SourceCodester Best House Rental Management System SQL注入漏洞

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester. A SQL injection vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which is caused by SQL injection of the parameters firstname/lastname/email...

9.8CVSS7.9AI score0.00663EPSS
Exploits1References6
CNNVD
CNNVD
added 2024/09/20 12:0 a.m.2 views

SourceCodester Best House Rental Management System 安全漏洞

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester, Inc. A security vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which is caused by an SQL injection in the parameters firstname/lastname/email...

8.8CVSS7AI score0.00583EPSS
Exploits1References6
OSV
OSV
added 2024/04/10 6:15 a.m.2 views

CVE-2024-3541

A vulnerability classified as problematic has been found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/adminuser.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

6.1CVSS3.9AI score0.00686EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/04/10 12:0 a.m.1 views

Church Management System 跨站脚本漏洞

Church Management System is a church management system. A cross-site scripting vulnerability exists in version 1.0 of the Church Management System, which stems from a cross-site scripting vulnerability in the firstname parameter of the /admin/adminuser.php file...

6.1CVSS4.5AI score0.00686EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/04/10 12:0 a.m.1 views

Church Management System SQL注入漏洞

Church Management System is a church management system. A SQL injection vulnerability exists in version 1.0 of the Church Management System, which originates from an SQL injection vulnerability in the firstname parameter of the /admin/adminuser.php file...

8.8CVSS7AI score0.00882EPSS
Exploits1References5
OSV
OSV
added 2024/03/20 10:15 p.m.3 views

CVE-2024-24050

Cross Site Scripting XSS vulnerability in Sourcecodester Workout Journal App 1.0 allows attackers to run arbitrary code via parameters firstname and lastname in /add-user.php...

4.7CVSS6AI score0.00443EPSS
Exploits4References1
ATTACKERKB
ATTACKERKB
added 2024/03/07 1:15 a.m.1 views

CVE-2023-51281

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters...

5.4CVSS5.8AI score0.00478EPSS
Exploits1References3
OSV
OSV
added 2024/03/06 1:15 a.m.2 views

CVE-2023-49971

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customersupport/index.php?page=customerlist...

6.1CVSS5.9AI score0.00433EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2024/03/06 1:15 a.m.3 views

CVE-2023-49971

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customersupport/index.php?page=customerlist...

6.1CVSS6AI score0.00433EPSS
Exploits1References3
NVD
NVD
added 2024/03/06 1:15 a.m.8 views

CVE-2023-49971

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customersupport/index.php?page=customerlist...

6.1CVSS5.6AI score0.00433EPSS
Exploits1References2
Prion
Prion
added 2024/03/06 1:15 a.m.10 views

Cross site scripting

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customersupport/index.php?page=customerlist...

5.9AI score0.00433EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/03/06 12:0 a.m.13 views

CVE-2023-49971

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customersupport/index.php?page=customerlist...

5.7AI score0.00433EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/03/06 12:0 a.m.2 views

Customer Support System 跨站脚本漏洞

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a cross-site scripting vulnerability that stems fro...

6.1CVSS6.2AI score0.00433EPSS
Exploits1References3
OSV
OSV
added 2024/03/03 2:15 p.m.2 views

CVE-2024-2145

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /endpoint/update-tracker.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the...

6.1CVSS3.8AI score0.00582EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/03/03 12:0 a.m.2 views

PT-2024-18876 · Unknown · Sourcecodester Online Mobile Management Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Mobile Management Store version 1.0 Description: A vulnerability was found in the software, classified as problematic. It affects an unknown function of the file /endpoint/update-tracker.php. The manipulation of the...

6.1CVSS4.3AI score0.00582EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2023/12/20 12:0 a.m.3 views

PT-2023-31431 · Unknown · Customer Support System

Name of the Vulnerable Software and Affected Versions: Customer Support System version v1 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at "/customer support/index.php?page=custom...

6.1CVSS6AI score0.00433EPSS
Exploits1References7
Rows per page
Query Builder