Lucene search
+L

160 matches found

Positive Technologies
Positive Technologies
•added 2024/04/03 12:00 a.m.•27 views

PT-2024-24649 · Sourcecodester · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Internship Portal Management System. This issue affects the file admin/add admin.php and is related to the...

7.2CVSS7.2AI score0.00706EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/03 12:00 a.m.•7 views

CVE-2024-3252: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Internship Portal Management System 1.0. This affects an unknown part of the file admin/checkadmin.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack remotely...

9.8CVSS5.5AI score0.00766EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/03 12:00 a.m.•21 views

PT-2024-24659 · Unknown · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue has been found in the SourceCodester Internship Portal Management System, affecting the processing of the file admin/edit admin.php. The manipulation...

7.2CVSS7.2AI score0.00706EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2024/04/03 12:00 a.m.•19 views

SQL Injection Vulnerability in the Internship Portal Management System

Internship Portal Management System is an internship portal management system by the individual developer ChatikoboL. A SQL injection vulnerability exists in Internship Portal Management System version 1.0, which originates from a SQL injection vulnerability in the name/username/password paramete...

7.2CVSS7AI score0.00706EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/03 12:00 a.m.•7 views

CVE-2024-3255: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Internship Portal Management System 1.0. Affected is an unknown function of the file admin/editadminquery.php. The manipulation of the argument username/password/name/adminid leads to sql injection. It is possible to...

7.2CVSS5.5AI score0.00758EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/03 12:00 a.m.•10 views

CVE-2024-3253: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Internship Portal Management System 1.0. This vulnerability affects unknown code of the file admin/addadmin.php. The manipulation of the argument name/username/password leads to sql injection. The attack can be initiated remotely...

7.2CVSS5.5AI score0.00706EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/03 12:00 a.m.•21 views

PT-2024-24711 · Unknown · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue has been discovered, affecting the file admin/delete activity.php. The manipulation of the activity id argument leads to SQL injection. This issue ca...

7.2CVSS7.1AI score0.00758EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/03 12:00 a.m.•7 views

CVE-2024-3256: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/editactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be...

7.2CVSS5.5AI score0.00706EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/03 12:00 a.m.•5 views

CVE-2024-3258: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin/addactivity.php. The manipulation of the argument title/description/start/end leads to sql injection. It is possible to initiate...

7.2CVSS5.5AI score0.00706EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/03 12:00 a.m.•19 views

PT-2024-24680 · Unknown · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue has been found in the SourceCodester Internship Portal Management System, affecting an unknown functionality of the file admin/edit activity.php. The...

7.2CVSS7.2AI score0.00706EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2024/04/03 12:00 a.m.•18 views

PT-2024-24691 · Unknown · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue was found in the SourceCodester Internship Portal Management System, affecting some unknown functionality of the file admin/edit activity query.php...

7.2CVSS7.1AI score0.00706EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/03 12:00 a.m.•8 views

CVE-2024-3254: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Internship Portal Management System 1.0. This issue affects some unknown processing of the file admin/editadmin.php. The manipulation of the argument adminid leads to sql injection. The attack may be initiated...

7.2CVSS5.5AI score0.00706EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/03 12:00 a.m.•8 views

CVE-2024-3259: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/deleteactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be initiated...

7.2CVSS5.5AI score0.00758EPSS
SaveExploits1References2
CVE
CVE
•added 2023/05/30 10:31 a.m.•70 views

CVE-2023-2973

CVE-2023-2973 affects SourceCodester Students Online Internship Timesheet System 1.0. Affected component: /ajax.php?action=save_company; root cause is manipulation of the name parameter that enables cross-site scripting (stored/reflected-style demonstrated input: ). The vulnerability allows remot...

6.1CVSS4.7AI score0.00631EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/05/30 10:31 a.m.•41 views

CVE-2023-2973 SourceCodester Students Online Internship Timesheet Syste cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Students Online Internship Timesheet Syste 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=savecompany. The manipulation of the argument name with the input...

3.3CVSS6.2AI score0.00631EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/05/30 12:00 a.m.•15 views

Students Online Internship Timesheet System Cross-site Script Vulnerability

Students Online Internship Timesheet System is an online internship timesheet system for students by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in Students Online Internship Timesheet System version 1.0, which stems from an incorrect manipulation of the...

6.1CVSS4.1AI score0.00631EPSS
SaveExploits1References4
CNVD
CNVD
•added 2023/05/30 12:00 a.m.•57 views

Students Online Internship Timesheet System sql Injection Vulnerability

Students Online Internship Timesheet System is an online internship timesheet system for students. Students Online Internship Timesheet System version 1.0 suffers from a sql injection vulnerability, which can be exploited by attackers to perform SQL injection and steal data...

9.8CVSS8AI score0.00779EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/30 12:00 a.m.•8 views

CVE-2023-2973: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Students Online Internship Timesheet Syste 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=savecompany. The manipulation of the argument name with the input leads to cross...

6.1CVSS3.9AI score0.00631EPSS
SaveExploits1References2
NVD
NVD
•added 2023/05/29 7:15 a.m.•38 views

CVE-2023-2955

A vulnerability, which was classified as critical, was found in SourceCodester Students Online Internship Timesheet System 1.0. Affected is an unknown function of the file renderedreport.php of the component GET Parameter Handler. The manipulation of the argument sid leads to sql injection. It is...

9.8CVSS7.4AI score0.00779EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/05/29 7:00 a.m.•46 views

CVE-2023-2955 SourceCodester Students Online Internship Timesheet System GET Parameter rendered_report.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Students Online Internship Timesheet System 1.0. Affected is an unknown function of the file renderedreport.php of the component GET Parameter Handler. The manipulation of the argument sid leads to sql injection. It is...

6.5CVSS10AI score0.00779EPSS
SaveExploits1References3
Rows per page
Query Builder