108 matches found
CVE-2023-4556
A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. Affected by this issue is the function mysqliquery of the file sexit.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2023-4556
The CVE-2023-4556 issue affects SourceCodester Online Graduate Tracer System 1.0, where the mysqli_query usage in sexit.php is vulnerable to SQL injection via the id parameter. The vulnerability can be exploited remotely, and public exploits/details have been disclosed (VDB-238154). Affected comp...
CVE-2023-4556 SourceCodester Online Graduate Tracer System sexit.php mysqli_query sql injection
A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. Affected by this issue is the function mysqliquery of the file sexit.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2023-1854
A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to th...
CVE-2023-1854
A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to th...
Information disclosure
A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to th...
CVE-2023-1854 SourceCodester Online Graduate Tracer System session expiration
A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to th...
CVE-2023-1854 SourceCodester Online Graduate Tracer System session expiration
A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to th...
CVE-2023-1854
CVE-2023-1854 — SourceCodester Online Graduate Tracer System 1.0 : A vulnerability in an unknown function in admin/ leads to session expiration. It can be exploited remotely, and the exploit has been disclosed publicly. Public sources (NVD) rate the impact as high (CVSSv3.1: 9.8) with network acc...
Online Graduate Tracer System 代码问题漏洞
Online Graduate Tracer System is an online graduate tracer system by the individual developer Carlo Montero. A code issue vulnerability exists in SourceCodester Online Graduate Tracer System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vend...
Sql injection
A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been classified as critical. This affects the function mysqliquery of the file bsitemp.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit...
CVE-2023-1394 SourceCodester Online Graduate Tracer System bsitemp.php mysqli_query sql injection
A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been classified as critical. This affects the function mysqliquery of the file bsitemp.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit...
CVE-2023-1394
Affected software: SourceCodester Online Graduate Tracer System 1.0. Vulnerable component: bsitemp.php, using mysqli_query. Root cause: improper handling of the id parameter enables SQL injection, reported as remotely exploitable with a publicly disclosed exploit (VDB-222981). Impact is high (per...
CVE-2023-1309
A vulnerability classified as critical was found in SourceCodester Online Graduate Tracer System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/searchit.php. The manipulation of the argument input leads to sql injection. The attack can be launched remotely. The...
CVE-2023-1308
A vulnerability classified as critical has been found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/adminlog.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
Sql injection
A vulnerability classified as critical has been found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/adminlog.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
Sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file admin/prof.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...
CVE-2023-1310 SourceCodester Online Graduate Tracer System prof.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file admin/prof.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...
CVE-2023-1310
CVE-2023-1310 affects SourceCodester Online Graduate Tracer System 1.0; the vulnerability is in admin/prof.php where unsafely manipulating the id parameter enables SQL injection. Exploitation can be remote and has been publicly disclosed. Multiple connected sources refer to a SQL injection origin...
CVE-2023-1309 SourceCodester Online Graduate Tracer System search_it.php sql injection
A vulnerability classified as critical was found in SourceCodester Online Graduate Tracer System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/searchit.php. The manipulation of the argument input leads to sql injection. The attack can be launched remotely. The...