Lucene search
K

3632 matches found

CVE
CVE
added 2024/03/15 6:31 a.m.101 views

CVE-2024-2482

CVE-2024-2482 affects Surya2Developer Hostel Management Service 1.0, via the HTTP POST Request Handler in the file /check_availability.php. The vulnerability arises from manipulation of the argument named oldpassword, causing an observable response discrepancy. Impact details in the provided sour...

3.7CVSS4.3AI score0.00828EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2024/03/08 12:15 a.m.13 views

CVE-2024-2272

A vulnerability classified as critical was found in keerti1924 Online-Book-Store-Website 1.0. This vulnerability affects unknown code of the file /home.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. The attack can be initiated...

9.8CVSS6.9AI score0.00558EPSS
Exploits0References3
Prion
Prion
added 2024/03/08 12:15 a.m.10 views

Sql injection

A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. It is possible to initiate the...

6.5CVSS7.8AI score0.00558EPSS
Exploits0References3
Prion
Prion
added 2024/03/08 12:15 a.m.15 views

Sql injection

A vulnerability classified as critical was found in keerti1924 Online-Book-Store-Website 1.0. This vulnerability affects unknown code of the file /home.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. The attack can be initiated...

6.5CVSS8AI score0.00558EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/03/07 11:31 p.m.10 views

CVE-2024-2272 keerti1924 Online-Book-Store-Website HTTP POST Request home.php sql injection

A vulnerability classified as critical was found in keerti1924 Online-Book-Store-Website 1.0. This vulnerability affects unknown code of the file /home.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. The attack can be initiated...

6.5CVSS7.5AI score0.00558EPSS
Exploits0References3
CVE
CVE
added 2024/03/07 11:31 p.m.50 views

CVE-2024-2272

CVE-2024-2272 affects the keerti1924 Online-Book-Store-Website v1.0. The vulnerability resides in the HTTP POST handler for /home.php where manipulating the product_name parameter enables an SQL injection. The issue is remote and has publicly disclosed exploits. References consistently identify t...

9.8CVSS6.9AI score0.00558EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2024/03/07 11:31 p.m.24 views

CVE-2024-2272 keerti1924 Online-Book-Store-Website HTTP POST Request home.php sql injection

A vulnerability classified as critical was found in keerti1924 Online-Book-Store-Website 1.0. This vulnerability affects unknown code of the file /home.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. The attack can be initiated...

6.5CVSS7.1AI score0.00558EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/03/07 11:31 p.m.22 views

CVE-2024-2271 keerti1924 Online-Book-Store-Website HTTP POST Request shop.php sql injection

A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. It is possible to initiate the...

6.5CVSS7.1AI score0.00558EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/03/07 11:31 p.m.8 views

CVE-2024-2271 keerti1924 Online-Book-Store-Website HTTP POST Request shop.php sql injection

A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. It is possible to initiate the...

6.5CVSS7.3AI score0.00558EPSS
Exploits0References3
CVE
CVE
added 2024/03/07 11:31 p.m.50 views

CVE-2024-2271

The CVE-2024-2271 entry affects keerti1924 Online-Book-Store-Website 1.0. A vulnerability in the HTTP POST Request Handler affects the /shop.php file, where the product_name parameter is susceptible to SQL injection. The issue can be exploited remotely, and public disclosures of the exploit exist...

9.8CVSS6.8AI score0.00558EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2024/03/04 9:15 p.m.26 views

CVE-2024-2168

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/operations/expensecategory.php of the component HTTP POST Request Handler. The manipulation of the argument status leads...

7.2CVSS5.3AI score0.00639EPSS
Exploits1References3
Prion
Prion
added 2024/03/04 9:15 p.m.32 views

Sql injection

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/operations/expensecategory.php of the component HTTP POST Request Handler. The manipulation of the argument status leads...

5.8CVSS5.4AI score0.00639EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/03/04 9:0 p.m.28 views

CVE-2024-2168 SourceCodester Online Tours & Travels Management System HTTP POST Request expense_category.php sql injection

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/operations/expensecategory.php of the component HTTP POST Request Handler. The manipulation of the argument status leads...

5.8CVSS5.7AI score0.00639EPSS
Exploits1References3
CVE
CVE
added 2024/03/04 9:0 p.m.59 views

CVE-2024-2168

CVE-2024-2168 pertains to SourceCodester Online Tours & Travels Management System 1.0. Affects an unknown function in the file /admin/operations/expense_category.php on the HTTP POST Request Handler, where manipulating the status argument triggers a SQL injection. The vulnerability allows remote ...

7.2CVSS5.3AI score0.00639EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/04 9:0 p.m.14 views

CVE-2024-2168 SourceCodester Online Tours & Travels Management System HTTP POST Request expense_category.php sql injection

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/operations/expensecategory.php of the component HTTP POST Request Handler. The manipulation of the argument status leads...

5.8CVSS7.4AI score0.00639EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/03/04 12:0 a.m.2 views

PT-2024-19014 · Unknown · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /admin/operations/expense category.php, specifically the HTTP POST Reque...

7.2CVSS5.8AI score0.00639EPSS
Exploits1References5
OSV
OSV
added 2024/02/02 10:15 p.m.2 views

CVE-2024-1196

A vulnerability classified as problematic was found in SourceCodester Testimonial Page Manager 1.0. This vulnerability affects unknown code of the file add-testimonial.php of the component HTTP POST Request Handler. The manipulation of the argument name/description/testimony leads to cross site...

6.1CVSS4AI score0.00481EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/02/02 10:0 p.m.23 views

CVE-2024-1196 SourceCodester Testimonial Page Manager HTTP POST Request add-testimonial.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Testimonial Page Manager 1.0. This vulnerability affects unknown code of the file add-testimonial.php of the component HTTP POST Request Handler. The manipulation of the argument name/description/testimony leads to cross site...

5CVSS6.1AI score0.00481EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/02/02 10:0 p.m.24 views

CVE-2024-1196 SourceCodester Testimonial Page Manager HTTP POST Request add-testimonial.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Testimonial Page Manager 1.0. This vulnerability affects unknown code of the file add-testimonial.php of the component HTTP POST Request Handler. The manipulation of the argument name/description/testimony leads to cross site...

5CVSS6.3AI score0.00481EPSS
Exploits0References2
VulnCheck KEV
VulnCheck KEV
added 2024/01/22 12:0 a.m.4 views

VulnCheck KEV: CVE-2024-0352

A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to...

9.8CVSS6.8AI score0.70688EPSS
Exploits1References1
Rows per page
Query Builder