Lucene search
+L

4226 matches found

Prion
Prion
•added 2024/03/08 12:15 a.m.•26 views

Sql injection

A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. It is possible to initiate the...

6.5CVSS7.8AI score0.00558EPSS
SaveExploits0References3
CVE
CVE
•added 2024/03/07 11:31 p.m.•70 views

CVE-2024-2272

CVE-2024-2272 affects the keerti1924 Online-Book-Store-Website v1.0. The vulnerability resides in the HTTP POST handler for /home.php where manipulating the product_name parameter enables an SQL injection. The issue is remote and has publicly disclosed exploits. References consistently identify t...

9.8CVSS6.9AI score0.00558EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/07 11:31 p.m.•28 views

CVE-2024-2272 keerti1924 Online-Book-Store-Website HTTP POST Request home.php sql injection

A vulnerability classified as critical was found in keerti1924 Online-Book-Store-Website 1.0. This vulnerability affects unknown code of the file /home.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. The attack can be initiated...

6.5CVSS7.5AI score0.00558EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/03/07 11:31 p.m.•48 views

CVE-2024-2272 keerti1924 Online-Book-Store-Website HTTP POST Request home.php sql injection

A vulnerability classified as critical was found in keerti1924 Online-Book-Store-Website 1.0. This vulnerability affects unknown code of the file /home.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. The attack can be initiated...

6.5CVSS7.1AI score0.00558EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/03/07 11:31 p.m.•28 views

CVE-2024-2271 keerti1924 Online-Book-Store-Website HTTP POST Request shop.php sql injection

A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. It is possible to initiate the...

6.5CVSS7.3AI score0.00558EPSS
SaveExploits0References3
CVE
CVE
•added 2024/03/07 11:31 p.m.•76 views

CVE-2024-2271

The CVE-2024-2271 entry affects keerti1924 Online-Book-Store-Website 1.0. A vulnerability in the HTTP POST Request Handler affects the /shop.php file, where the product_name parameter is susceptible to SQL injection. The issue can be exploited remotely, and public disclosures of the exploit exist...

9.8CVSS6.8AI score0.00558EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/03/07 11:31 p.m.•52 views

CVE-2024-2271 keerti1924 Online-Book-Store-Website HTTP POST Request shop.php sql injection

A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. It is possible to initiate the...

6.5CVSS7.1AI score0.00558EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/07 12:00 a.m.•3 views

CVE-2024-2272: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in keerti1924 Online-Book-Store-Website 1.0. This vulnerability affects unknown code of the file /home.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. The attack can be initiated...

9.8CVSS5.5AI score0.00558EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/07 12:00 a.m.•6 views

CVE-2024-2271: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. It is possible to initiate the...

9.8CVSS5.5AI score0.00558EPSS
SaveExploits0References2
NVD
NVD
•added 2024/03/04 9:15 p.m.•45 views

CVE-2024-2168

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/operations/expensecategory.php of the component HTTP POST Request Handler. The manipulation of the argument status leads...

7.2CVSS5.3AI score0.00639EPSS
SaveExploits1References3
Prion
Prion
•added 2024/03/04 9:15 p.m.•52 views

Sql injection

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/operations/expensecategory.php of the component HTTP POST Request Handler. The manipulation of the argument status leads...

5.8CVSS5.4AI score0.00639EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/03/04 9:00 p.m.•51 views

CVE-2024-2168 SourceCodester Online Tours & Travels Management System HTTP POST Request expense_category.php sql injection

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/operations/expensecategory.php of the component HTTP POST Request Handler. The manipulation of the argument status leads...

5.8CVSS5.7AI score0.00639EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/03/04 9:00 p.m.•31 views

CVE-2024-2168 SourceCodester Online Tours & Travels Management System HTTP POST Request expense_category.php sql injection

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/operations/expensecategory.php of the component HTTP POST Request Handler. The manipulation of the argument status leads...

5.8CVSS7.4AI score0.00639EPSS
SaveExploits1References3
CVE
CVE
•added 2024/03/04 9:00 p.m.•87 views

CVE-2024-2168

CVE-2024-2168 pertains to SourceCodester Online Tours & Travels Management System 1.0. Affects an unknown function in the file /admin/operations/expense_category.php on the HTTP POST Request Handler, where manipulating the status argument triggers a SQL injection. The vulnerability allows remote ...

7.2CVSS5.3AI score0.00639EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/04 12:00 a.m.•3 views

CVE-2024-2168: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/operations/expensecategory.php of the component HTTP POST Request Handler. The manipulation of the argument status leads...

7.2CVSS5.5AI score0.00639EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/03/04 12:00 a.m.•19 views

PT-2024-19014 · Unknown · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /admin/operations/expense category.php, specifically the HTTP POST Reque...

7.2CVSS5.8AI score0.00639EPSS
SaveExploits1References5
OSV
OSV
•added 2024/02/02 10:15 p.m.•16 views

CVE-2024-1196

A vulnerability classified as problematic was found in SourceCodester Testimonial Page Manager 1.0. This vulnerability affects unknown code of the file add-testimonial.php of the component HTTP POST Request Handler. The manipulation of the argument name/description/testimony leads to cross site...

6.1CVSS4AI score0.00481EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/02/02 10:00 p.m.•51 views

CVE-2024-1196 SourceCodester Testimonial Page Manager HTTP POST Request add-testimonial.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Testimonial Page Manager 1.0. This vulnerability affects unknown code of the file add-testimonial.php of the component HTTP POST Request Handler. The manipulation of the argument name/description/testimony leads to cross site...

5CVSS6.3AI score0.00481EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/02/02 10:00 p.m.•29 views

CVE-2024-1196 SourceCodester Testimonial Page Manager HTTP POST Request add-testimonial.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Testimonial Page Manager 1.0. This vulnerability affects unknown code of the file add-testimonial.php of the component HTTP POST Request Handler. The manipulation of the argument name/description/testimony leads to cross site...

5CVSS6.1AI score0.00481EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/02 12:00 a.m.•3 views

CVE-2024-1196: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Testimonial Page Manager 1.0. This vulnerability affects unknown code of the file add-testimonial.php of the component HTTP POST Request Handler. The manipulation of the argument name/description/testimony leads to cross site...

6.1CVSS4AI score0.00481EPSS
SaveExploits0References2
Rows per page
Query Builder