Lucene search
+L

7035 matches found

RedhatCVE
RedhatCVE
added 2025/04/17 1:32 p.m.35 views

CVE-2025-32929

Missing Authorization vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Generator for WooCommerce embedding-barcodes-into-product-pages-and-orders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Barcode Generator for WooCommerce: from n/a through ...

7.5CVSS7.2AI score0.00363EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/17 12:0 a.m.12 views

PT-2025-17171 · Unknown · Ashish Ajani Contact Form Vcard Generator

Name of the Vulnerable Software and Affected Versions: Ashish Ajani Contact Form vCard Generator versions n/a through 2.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means th...

7.1CVSS7.2AI score0.00276EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.6 views

WordPress plugin Contact Form vCard Generator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS6.9AI score0.00276EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/16 5:15 p.m.10 views

CVE-2024-40074

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/SystemSettings.php?f=updatesettings, and the point of vulnerability is in the POST parameter 'shortname'...

4.8CVSS5.8AI score0.00256EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/16 5:15 p.m.7 views

CVE-2024-40072

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index&id=1...

9.8CVSS5.8AI score0.00476EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/16 5:15 p.m.24 views

CVE-2024-40074

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/SystemSettings.php?f=updatesettings, and the point of vulnerability is in the POST parameter 'shortname'...

4.8CVSS0.00256EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/16 5:15 p.m.27 views

CVE-2024-40073

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at idgenerator/admin/?page=generate&template=4...

9.8CVSS0.00476EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/16 5:15 p.m.7 views

CVE-2024-40073

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at idgenerator/admin/?page=generate&template=4...

9.8CVSS5.8AI score0.00476EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/16 5:15 p.m.26 views

CVE-2024-40072

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index&id=1...

9.8CVSS0.00476EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/16 5:15 p.m.7 views

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/Users.php?f=save, and the point of vulnerability is in the POST parameter 'firstname' and 'lastname'...

5.4CVSS5.8AI score0.00256EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/16 5:15 p.m.24 views

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/Users.php?f=save, and the point of vulnerability is in the POST parameter 'firstname' and 'lastname'...

5.4CVSS0.00256EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/16 5:15 p.m.20 views

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

5.1CVSS0.0025EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/16 5:15 p.m.6 views

CVE-2024-40071

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS6.1AI score0.00712EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/16 5:15 p.m.27 views

CVE-2024-40068

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=templates/managetemplate&id=1...

5.9CVSS0.00235EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/16 5:15 p.m.8 views

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

5.1CVSS6.1AI score0.0025EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/16 12:0 a.m.24 views

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

0.0025EPSS
SaveExploits1References1
CVE
CVE
added 2025/04/16 12:0 a.m.62 views

CVE-2024-40071

CVE-2024-40071 affects Sourcecodester Online ID Generator System 1.0. The vulnerability is an arbitrary file upload via id_generator/classes/SystemSettings.php?f=update_settings that allows execution of arbitrary PHP code. CVSS 3.1 metrics indicate NETWORK/vector, HIGH impact on confidentiality, ...

9.8CVSS8.3AI score0.00712EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/04/16 12:0 a.m.4 views

SourceCodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an open source online identity generator system from SourceCodester. A security vulnerability exists in SourceCodester Online ID Generator System version 1.0, which stems from a stored cross-site scripting attack due to misuse of the parameter shortnam...

4.8CVSS6AI score0.00256EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/04/16 12:0 a.m.8 views

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/Users.php?f=save, and the point of vulnerability is in the POST parameter 'firstname' and 'lastname'...

5.3AI score0.00256EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/04/16 12:0 a.m.6 views

Sourcecodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an online identity generator system from SourceCodester open source. A security vulnerability exists in the Sourcecodester Online ID Generator System version 1.0, which stems from an incorrect manipulation of the parameter id leading to SQL injection...

5.9CVSS7.4AI score0.00235EPSS
SaveExploits1References2
Rows per page
Query Builder