TP-LINK Archer C7 安全漏洞

The TP-LINK Archer C7 is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK Archer C7 v2enus180114 version, which stems from a problem with the component GET Request Parameter Handler that can lead to a denial of service...

PT-2023-20622 · Unknown · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam System version 1.0 Description: A critical issue has been found in the SourceCodester Online Exam System. This issue affects the file adminpanel/admin/facebox modal/updateCourse.php, specifically the GET Parameter...

Sql injection

A vulnerability was found in SourceCodester Online Reviewer System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /reviewer/system/system/admins/manage/users/user-update.php of the component GET Parameter Handler. The manipulation of the argument...

CVE-2023-2596 SourceCodester Online Reviewer System GET Parameter user-update.php sql injection

A vulnerability was found in SourceCodester Online Reviewer System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /reviewer/system/system/admins/manage/users/user-update.php of the component GET Parameter Handler. The manipulation of the argument...

PT-2023-20386 · Unknown · Sourcecodester Online Reviewer System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Reviewer System version 1.0 Description: A critical issue was found in the system, affecting the file /reviewer/system/system/admins/manage/users/user-update.php, specifically the GET Parameter Handler component. The...

CVE-2023-2451

A vulnerability was found in SourceCodester Online DJ Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/bookings/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...

Sql injection

A vulnerability was found in SourceCodester Online DJ Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/bookings/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...

CVE-2023-2451 SourceCodester Online DJ Management System GET Parameter view_details.php sql injection

A vulnerability was found in SourceCodester Online DJ Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/bookings/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...

PT-2023-19656 · Sourcecodester · Sourcecodester Online Dj Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online DJ Management System version 1.0 Description: A critical issue affects the processing of the file /admin/bookings/view details.php, specifically the GET Parameter Handler component. The manipulation of the id argument...

CVE-2023-30455

An issue was discovered in ebankIT before 7. A Denial-of-Service attack is possible through the GET parameter EStatementsIds located on the /Controls/Generic/EBMK/Handlers/EStatements/DownloadEStatement.ashx endpoint. The GET parameter accepts over 100 comma-separated e-statement IDs without...

Sql injection

A vulnerability classified as critical has been found in SourceCodester Online DJ Management System 1.0. Affected is an unknown function of the file admin/events/manageevent.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

Sql injection

A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/inquiries/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

CVE-2023-2371 SourceCodester Online DJ Management System GET Parameter view_details.php sql injection

A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/inquiries/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

CVE-2023-30455

An issue was discovered in ebankIT before 7. A Denial-of-Service attack is possible through the GET parameter EStatementsIds located on the /Controls/Generic/EBMK/Handlers/EStatements/DownloadEStatement.ashx endpoint. The GET parameter accepts over 100 comma-separated e-statement IDs without...

CVE-2023-30455

CVE-2023-30455 affects ebankIT before version 7. A DoS vulnerability exists in the /Controls/Generic/EBMK/Handlers/EStatements/DownloadEStatement.ashx endpoint: the GET parameter EStatementsIds accepts 100+ comma-separated IDs without error, causing the server to respond in about 60 seconds and g...

PT-2023-19139 · Unknown · Sourcecodester Online Dj Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online DJ Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Online DJ Management System. The issue affects an unknown function of the file admin/events/manage event.php,...

PT-2023-19149 · Unknown · Sourcecodester Online Dj Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online DJ Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Online DJ Management System. The issue affects an unknown functionality of the file admin/inquiries/view details.php,...

CVE-2023-2244

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

Sql injection

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

CVE-2023-2244

CVE-2023-2244 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability is a SQL injection in the GET Parameter Handler of the file /admin/orders/update_status.php, caused by manipulation of the id parameter. It can be exploited remotely; exploitation has been disclosed publicly (VDB-2272...