Lucene search
+L

226 matches found

NVD
NVD
•added 2023/12/02 9:15 a.m.•30 views

CVE-2023-6464

A vulnerability was found in SourceCodester User Registration and Login System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument user leads to sql injection. The attack may be launched remotely...

9.8CVSS0.00796EPSS
SaveExploits1References3
Prion
Prion
•added 2023/12/02 9:15 a.m.•44 views

Sql injection

A vulnerability was found in SourceCodester User Registration and Login System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument user leads to sql injection. The attack may be launched remotely...

6.5CVSS7.6AI score0.00796EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/12/02 9:00 a.m.•59 views

CVE-2023-6464

CVE-2023-6464 affects SourceCodester User Registration and Login System 1.0. The vulnerability lies in the file /endpoint/add-user.php where mutating the user parameter leads to SQL injection. Attacks can be launched remotely, and exploits have been publicly disclosed. Remediation guidance in con...

9.8CVSS8.2AI score0.00796EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/12/02 9:00 a.m.•48 views

CVE-2023-6464 SourceCodester User Registration and Login System add-user.php sql injection

A vulnerability was found in SourceCodester User Registration and Login System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument user leads to sql injection. The attack may be launched remotely...

6.5CVSS9.9AI score0.00796EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/12/02 12:00 a.m.•24 views

SourceCodester User Registration and Login System SQL Injection Vulnerability

User Registration and Login System is a user registration and login system by Remy Andrade, an individual developer. A SQL injection vulnerability exists in the SourceCodester User Registration and Login System, which originates from an SQL injection in the user parameter of /endpoint/add-user.ph...

9.8CVSS8AI score0.00796EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/02 12:00 a.m.•8 views

CVE-2023-6464: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester User Registration and Login System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument user leads to sql injection. The attack may be launched remotely...

9.8CVSS6.6AI score0.00796EPSS
SaveExploits1References2
Prion
Prion
•added 2023/12/01 11:15 p.m.•34 views

Cross site scripting

A vulnerability has been found in SourceCodester User Registration and Login System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument firstname leads to cross site scripting. The attac...

4CVSS6.5AI score0.00604EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2023/12/01 10:15 p.m.•34 views

CVE-2023-6462

A vulnerability, which was classified as problematic, was found in SourceCodester User Registration and Login System 1.0. Affected is an unknown function of the file /endpoint/delete-user.php. The manipulation of the argument user leads to cross site scripting. It is possible to launch the attack...

6.1CVSS0.00608EPSS
SaveExploits1References3
CVE
CVE
•added 2023/12/01 9:31 p.m.•60 views

CVE-2023-6462

CVE-2023-6462 pertains to the SourceCodester User Registration and Login System 1.0. The vulnerability is an XSS in the file /endpoint/delete-user.php triggered by manipulating the user parameter, described as a remote-executable issue. Multiple connected records (NVD, CVE listings, and related d...

6.1CVSS4.8AI score0.00608EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/12/01 9:31 p.m.•52 views

CVE-2023-6462 SourceCodester User Registration and Login System delete-user.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester User Registration and Login System 1.0. Affected is an unknown function of the file /endpoint/delete-user.php. The manipulation of the argument user leads to cross site scripting. It is possible to launch the attack...

4CVSS6.2AI score0.00608EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/12/01 12:00 a.m.•56 views

SourceCodester User Registration and Login System Cross-Site Scripting Vulnerability

User Registration and Login System is a user registration and login system by Remy Andrade, an individual developer. A cross-site scripting vulnerability exists in the SourceCodester User Registration and Login System, which originates from cross-site scripting in the firstname parameter of...

5.4CVSS6.1AI score0.00604EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/01 12:00 a.m.•7 views

CVE-2023-6463: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester User Registration and Login System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument firstname leads to cross site scripting. The attac...

5.4CVSS3.6AI score0.00604EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/01 12:00 a.m.•7 views

CVE-2023-6462: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester User Registration and Login System 1.0. Affected is an unknown function of the file /endpoint/delete-user.php. The manipulation of the argument user leads to cross site scripting. It is possible to launch the attack...

6.1CVSS3.9AI score0.00608EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/10/16 9:15 p.m.•17 views

CVE-2023-40852

SQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive information via crafted string in the admin user name field on the admin log in page...

9.8CVSS5.9AI score0.00947EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/10/16 9:15 p.m.•19 views

CVE-2023-40852

SQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive information via crafted string in the admin user name field on the admin log in page...

9.8CVSS5.9AI score0.00947EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/20 9:15 p.m.•51 views

CVE-2023-38875

A reflected cross-site scripting XSS vulnerability in msaad1999's PHP-Login-System 2.0.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'validator' parameter in '/reset-password'...

6.1CVSS6.1AI score0.0087EPSS
SaveExploits1References1
NVD
NVD
•added 2023/09/20 9:15 p.m.•46 views

CVE-2023-38876

A reflected cross-site scripting XSS vulnerability in msaad1999's PHP-Login-System 2.0.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'selector' parameter in '/reset-password'...

6.1CVSS6.1AI score0.00832EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/09/20 9:15 p.m.•11 views

CVE-2023-38876

A reflected cross-site scripting XSS vulnerability in msaad1999's PHP-Login-System 2.0.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'selector' parameter in '/reset-password'...

6.1CVSS6AI score0.00832EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/09/20 9:15 p.m.•8 views

CVE-2023-38875

A reflected cross-site scripting XSS vulnerability in msaad1999's PHP-Login-System 2.0.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'validator' parameter in '/reset-password'...

6.1CVSS6AI score0.0087EPSS
SaveExploits1References3
Prion
Prion
•added 2023/09/20 9:15 p.m.•33 views

Cross site scripting

A reflected cross-site scripting XSS vulnerability in msaad1999's PHP-Login-System 2.0.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'selector' parameter in '/reset-password'...

5.8CVSS6.1AI score0.00832EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder