CVE-2023-3177

A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin\inquiries\viewinquiry.php. The manipulation leads to sql injection. The attack can be launched remotely...

CVE-2023-3177 SourceCodester Lost and Found Information System view_inquiry.php sql injection

A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin\inquiries\viewinquiry.php. The manipulation leads to sql injection. The attack can be launched remotely...

CVE-2023-3177 SourceCodester Lost and Found Information System view_inquiry.php sql injection

A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin\inquiries\viewinquiry.php. The manipulation leads to sql injection. The attack can be launched remotely...

CVE-2023-3177

CVE-2023-3177 affects SourceCodester Lost and Found Information System 1.0. Affected component: admin/inquiries/view_inquiry.php. Root cause: SQL injection due to improper handling of input in that file, enabling remote exploitation. Exploitability is high; attack vector is network with no user i...

CVE-2023-3176

CVE-2023-3176 affects SourceCodester Lost and Found Information System 1.0. The vulnerability is an SQL injection in the admin\user\manage_user.php function, triggered by manipulating the id parameter. It can be exploited remotely and the exploit has been publicly disclosed. Affected component is...

Lost and Found Information System Cross-Site Scripting Vulnerability

Lost and Found Information System is a lost and found management system. A cross-site scripting vulnerability exists in Lost and Found Information System version 1.0, which can be exploited by attackers to inject malicious JavaScript script...

CVE-2023-3017

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been classified as problematic. This affects an unknown part of the file admin/?page=user/manageuser of the component Manage User Page. The manipulation of the argument First Name/Middle Name/Last Name leads...

CVE-2023-3017

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been classified as problematic. This affects an unknown part of the file admin/?page=user/manageuser of the component Manage User Page. The manipulation of the argument First Name/Middle Name/Last Name leads...

Cross site scripting

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been classified as problematic. This affects an unknown part of the file admin/?page=user/manageuser of the component Manage User Page. The manipulation of the argument First Name/Middle Name/Last Name leads...

CVE-2023-3018

CVE-2023-3018 pertains to the SourceCodester Lost and Found Information System 1.0. The vulnerability affects the endpoint /admin/?page=user/list, where improper access controls allow remote manipulation, enabling privilege escalation to access admin functionalities. Multiple connected sources co...

CVE-2023-3017

CVE-2023-3017 affects SourceCodester Lost and Found Information System 1.0, specifically the Manage User Page endpoint (admin/?page=user/manage_user). The issue is a basic cross-site scripting (XSS) vulnerability arising from manipulation of the First Name/Middle Name/Last Name fields, reported a...

CVE-2021-31233

SQL Injection vulnerability found in Fighting Cock Information System v.1.0 allows a remote attacker to obtain sensitive information via the editbreed.php parameter...

CVE-2021-31233

SQL Injection vulnerability found in Fighting Cock Information System v.1.0 allows a remote attacker to obtain sensitive information via the editbreed.php parameter...

CVE-2021-31233

The CVE-2021-31233 entry describes an SQL Injection vulnerability in Fighting Cock Information System v1.0. The issue is exploitable remotely via the edit_breed.php parameter, enabling a attacker to obtain sensitive information. Several connected sources (NVD, Red Hat, CVE list entries, and third...

PT-2023-22568 · Sourcecodester · Sourcecodester Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A critical issue has been identified, affecting the /admin/?page=user/list file, which leads to improper access controls. The attack can be initiated remotely...

Lost and Found Information System 访问控制错误漏洞

Lost and Found Information System is a lost and found information system by oretnom23 Individual Developer. An Access Control Error vulnerability exists in Lost and Found Information System version 1.0, which stems from incorrect access control...

Fighting Cock Information System SQL注入漏洞

Fighting Cock Information System is a chicken information system by chrisjelo individual developer. A security vulnerability exists in Fighting Cock Information System version 1.0, which stems from an SQL injection vulnerability. The vulnerability can be exploited to obtain sensitive information...

PT-2023-12143 · Unknown · Fighting Cock Information System

Name of the Vulnerable Software and Affected Versions: Fighting Cock Information System version 1.0 Description: A SQL Injection issue allows a remote attacker to obtain sensitive information via the 'edit breed.php' parameter. Recommendations: For Fighting Cock Information System version 1.0,...

CVE-2021-31233

SQL Injection vulnerability found in Fighting Cock Information System v.1.0 allows a remote attacker to obtain sensitive information via the editbreed.php parameter...

Lost And Found Information System 1.0 Broken Access Control / Privilege Escalation

Vulnerability: Broken Access Control Author: Akash Pandey CVE: CVE-2023-3018 Source: https://www.sourcecodester.com/php/16525/lost-and-found-information-system-using-php-and-mysql-db-source-code-free-download.html Steps to re-produce: 1. Go to https://site.com/admin/?page=user/list as staff user...