Lucene search
+L

65 matches found

CNNVD
CNNVD
•added 2025/05/15 12:00 a.m.•23 views

SourceCodester Student Result Management System 路径遍历漏洞

SourceCodester Student Result Management System is a SourceCodester open source student result management system. SourceCodester Student Result Management System version 1.0 has a path traversal vulnerability, the vulnerability stems from the wrong operation of the parameter img in the file...

5.5CVSS5.5AI score0.00654EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/12/05 12:00 a.m.•10 views

Code-Projects Online Notice Board System 代码问题漏洞

Code-Projects Online Notice Board System is a Code-Projects open source online bulletin board system. A code issue vulnerability exists in Code-Projects Online Notice Board System prior to version 1.0, which stems from an unrestricted upload of the parameter img...

9.8CVSS7.6AI score0.00829EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/12/05 12:00 a.m.•11 views

PT-2024-17500 · Unknown · Code-Projects Online Notice Board

Name of the Vulnerable Software and Affected Versions: code-projects Online Notice Board version 1.0 Description: A critical issue affects the processing of the file /registration.php of the component Profile Picture Handler. The manipulation of the argument img leads to unrestricted upload. The...

9.8CVSS7.1AI score0.00829EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2024/08/29 12:00 a.m.•16 views

FeehiCMS 代码问题漏洞

FeehiCMS is a content management system CMS based on the Yii2 framework, aiming to provide Yii2 enthusiasts with a full-featured CMS system so that developers can focus more on the development of business functions. A security vulnerability exists in FeehiCMS. The vulnerability is related to the...

9.8CVSS7.1AI score0.00756EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/08/06 12:00 a.m.•16 views

itsourcecode Airline Reservation System 代码问题漏洞

itsourcecode Airline Reservation System is an airline reservation system from itsourcecode, Inc. A code issue vulnerability exists in version 1.0 of itsourcecode Airline Reservation System, which stems from an incorrect manipulation of the parameter img that can lead to unlimited file uploads...

9.8CVSS6.6AI score0.00674EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/07/02 12:00 a.m.•20 views

SourceCodester Home Owners Collection Management System Code Issue Vulnerability

Home Owners Collection Management System is a homeowners collection management system. A code issue vulnerability exists in SourceCodester Home Owners Collection Management System version 1.0, which stems from the parameter img in the file /classes/Users.php?f=save that can lead to unrestricted...

9.8CVSS7.1AI score0.00676EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/07/02 12:00 a.m.•17 views

PT-2024-37626 · Sourcecodester · Sourcecodester Home Owners Collection Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Home Owners Collection Management System version 1.0 Description: A critical issue affects the processing of the file /classes/Users.php?f=save, allowing unrestricted upload through the manipulation of the img argument. This ca...

9.8CVSS6.5AI score0.00676EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/06/24 12:00 a.m.•20 views

PT-2024-37508 · Sourcecodester · Sourcecodester Simple Online Bidding System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Bidding System version 1.0 Description: A critical issue affects the /admin/ajax.php?action=save settings file, where the manipulation of the img argument leads to unrestricted upload. This can be initiated...

9.8CVSS6.5AI score0.00665EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2024/05/16 12:00 a.m.•15 views

PT-2024-33348 · Sourcecodester · Sourcecodester Employee/Visitor Gate Pass Logging System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description: A critical vulnerability has been found in the system, affecting an unknown function of the file /employee gatepass/classes/Users.php?f=ssave. The...

9.8CVSS6.6AI score0.00674EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2024/03/04 12:00 a.m.•16 views

Best POS Management System SQL Injection Vulnerability

Best pos management system is a best pos management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Best POS Management System version 1.0, which originates from a SQL injection vulnerability in the parameter img of the file adminclass.php...

9.8CVSS7.9AI score0.00556EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/03/04 12:00 a.m.•20 views

PT-2024-18963 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best POS Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file admin class.php. The manipulation of the img argument leads to sql injection. It is possibl...

9.8CVSS7.5AI score0.00556EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/03/03 12:00 a.m.•16 views

PT-2024-18900 · Unknown · Sourcecodester Online Mobile Management Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Mobile Management Store version 1.0 Description: A critical vulnerability has been found in the software, affecting an unknown part of the file /classes/Users.php. The manipulation of the img argument leads to unrestrict...

8.8CVSS6.6AI score0.00832EPSS
SaveExploits1References6
OSV
OSV
•added 2023/07/27 12:15 p.m.•19 views

CVE-2023-3970

A vulnerability, which was classified as problematic, was found in GZ Scripts Availability Booking Calendar PHP 1.0. This affects an unknown part of the file /index.php?controller=GzUser&action=edit&id=1 of the component Image Handler. The manipulation of the argument img leads to cross site...

5.4CVSS3.9AI score0.00564EPSS
SaveExploits1References3
NVD
NVD
•added 2023/07/27 12:15 p.m.•24 views

CVE-2023-3970

A vulnerability, which was classified as problematic, was found in GZ Scripts Availability Booking Calendar PHP 1.0. This affects an unknown part of the file /index.php?controller=GzUser&action=edit&id=1 of the component Image Handler. The manipulation of the argument img leads to cross site...

5.4CVSS4.4AI score0.00564EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/07/27 12:00 a.m.•22 views

Availability Booking Calendar PHP 跨站脚本漏洞

Availability Booking Calendar PHP is a GZ Scripts open source availability booking calendar system . A cross-site scripting vulnerability exists in GZ Scripts Availability Booking Calendar PHP version 1.0, which stems from the parameter img in the file /index.php?controller=GzUser&action=edit&id=...

5.4CVSS4.1AI score0.00564EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/06/14 12:00 a.m.•18 views

OTCMS 安全漏洞

OTCMS Nettie CMS is a content management system CMS for article-based websites. A security vulnerability exists in OTCMS versions prior to 6.62, which stems from an incorrect operation of the parameter img that results in path traversal...

7.5CVSS5.5AI score0.00961EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/06/14 12:00 a.m.•20 views

PT-2023-23768 · Otcms · Otcms

Name of the Vulnerable Software and Affected Versions: OTCMS versions up to 6.62 Description: A problematic issue was found in OTCMS. It affects an unknown function of the file admin/readDeal.php, specifically the API endpoint "admin/readDeal.php?mudi=readQrCode". The manipulation of the img...

7.5CVSS4.3AI score0.00961EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/04/23 12:00 a.m.•15 views

PT-2023-18512 · Sourcecodester · Sourcecodester Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: A critical issue has been found in the SourceCodester Online Pizza Ordering System, affecting the file admin/ajax.php?action=save settings. The manipulation of the img...

9.8CVSS6.7AI score0.03624EPSS
SaveExploits4References9
Positive Technologies
Positive Technologies
•added 2023/03/14 12:00 a.m.•15 views

PT-2023-16949 · Unknown · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A vulnerability was found in the SourceCodester Online Tours & Travels Management System, allowing for unrestricted upload due to the manipulation of the img...

9.8CVSS5.1AI score0.00705EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2023/03/14 12:00 a.m.•14 views

Online Tours & Travels Management System 代码问题漏洞

Online Tours & Travels Management System is an online tours management system by Mayuri K. Individual developer. A code issue exists in SourceCodester Online Tours & Travels Management System version 1.0, which is caused by an unknown function in the file admin/ab.php, which causes unrestricted...

9.8CVSS5.8AI score0.00705EPSS
SaveExploits0References4
Rows per page
Query Builder