Lucene search
+L

4100 matches found

Prion
Prion
•added 2023/06/23 11:15 a.m.•25 views

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Game Result Matrix System 1.0. This affects an unknown part of the file /dipam/athlete-profile.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

6.5CVSS9.7AI score0.00756EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/06/23 10:15 a.m.•10 views

CVE-2023-3382

A vulnerability, which was classified as problematic, has been found in SourceCodester Game Result Matrix System 1.0. Affected by this issue is some unknown functionality of the file /dipam/save-delegates.php of the component GET Parameter Handler. The manipulation of the argument delname leads t...

6.1CVSS3.9AI score0.00567EPSS
SaveExploits1References3
NVD
NVD
•added 2023/06/23 10:15 a.m.•25 views

CVE-2023-3382

A vulnerability, which was classified as problematic, has been found in SourceCodester Game Result Matrix System 1.0. Affected by this issue is some unknown functionality of the file /dipam/save-delegates.php of the component GET Parameter Handler. The manipulation of the argument delname leads t...

6.1CVSS4.4AI score0.00567EPSS
SaveExploits1References3
Prion
Prion
•added 2023/06/23 10:15 a.m.•23 views

Cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Game Result Matrix System 1.0. Affected by this issue is some unknown functionality of the file /dipam/save-delegates.php of the component GET Parameter Handler. The manipulation of the argument delname leads t...

4CVSS6AI score0.00567EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/06/23 10:00 a.m.•41 views

CVE-2023-3383 SourceCodester Game Result Matrix System GET Parameter athlete-profile.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Game Result Matrix System 1.0. This affects an unknown part of the file /dipam/athlete-profile.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

6.5CVSS9.9AI score0.00756EPSS
SaveExploits1References3
CVE
CVE
•added 2023/06/23 10:00 a.m.•52 views

CVE-2023-3383

CVE-2023-3383 affects SourceCodester Game Result Matrix System 1.0. The vulnerability is in the GET Parameter Handler for /dipam/athlete-profile.php, where manipulation of the id argument leads to SQL injection. It can be exploited remotely and the exploit has been disclosed publicly. Multiple so...

9.8CVSS8.3AI score0.00756EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/06/23 10:00 a.m.•44 views

CVE-2023-3382

CVE-2023-3382 affects SourceCodester Game Result Matrix System 1.0. The vulnerability resides in the GET Parameter Handler for the /dipam/save-delegates.php endpoint, where improper handling of the del_name parameter allows cross-site scripting. The issue can be exploited remotely and the exploit...

6.1CVSS4.4AI score0.00567EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/06/23 10:00 a.m.•36 views

CVE-2023-3382 SourceCodester Game Result Matrix System GET Parameter save-delegates.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Game Result Matrix System 1.0. Affected by this issue is some unknown functionality of the file /dipam/save-delegates.php of the component GET Parameter Handler. The manipulation of the argument delname leads t...

4CVSS6.2AI score0.00567EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/23 12:00 a.m.•2 views

CVE-2023-3382: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Game Result Matrix System 1.0. Affected by this issue is some unknown functionality of the file /dipam/save-delegates.php of the component GET Parameter Handler. The manipulation of the argument delname leads t...

6.1CVSS3.7AI score0.00567EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/23 12:00 a.m.•4 views

CVE-2023-3383: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Game Result Matrix System 1.0. This affects an unknown part of the file /dipam/athlete-profile.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

9.8CVSS6.6AI score0.00756EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/06/23 12:00 a.m.•10 views

SourceCodester Game Result Matrix System SQL注入漏洞

Game Result Matrix System is a game system by the individual developer imarkpatric. A SQL injection vulnerability exists in SourceCodester Game Result Matrix System version 1.0, which stems from a problem in the file /dipam/athlete-profile.php, where manipulation of the parameter id can lead to s...

9.8CVSS7AI score0.00756EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/06/23 12:00 a.m.•13 views

Game Result Matrix System 跨站脚本漏洞

Game Result Matrix System is a game system by the individual developer imarkpatric. A cross-site scripting vulnerability exists in version 1.0 of the SourceCodester Game Result Matrix System, which stems from a problem with the file /dipam/save-delegates.php, where incorrect manipulation of the...

6.1CVSS4.1AI score0.00567EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2023/06/19 12:00 a.m.•11 views

Fedora: Security Advisory for matrix-synapse (FEDORA-2023-56760afca8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.4CVSS7.1AI score0.00752EPSS
SaveExploits0References2
Fedora
Fedora
•added 2023/06/17 1:24 a.m.•37 views

[SECURITY] Fedora 38 Update: matrix-synapse-1.85.2-1.fc38

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...

5.4CVSS4.6AI score0.00752EPSS
SaveExploits0
Veracode
Veracode
•added 2023/06/16 11:15 a.m.•27 views

Authorization Bypass

matrix-synapse is vulnerable to Authorization Bypass. The vulnerability exists because it does not properly validate the deactivated status of users during login time. which allows a user to login even if there account is deactivated. Note that this vulnerability only applies if JSON Web Tokens a...

5.4CVSS6.7AI score0.00752EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/06/16 12:00 a.m.•14 views

Vulnerability of microprogramming software in embedded network control controllers of building management systems like ASPECT Enterprise, NEXUS Series, and MATRIX Series, due to insufficient validation of input data, allows intruders to execute arbitrary codes.

The vulnerability of microprogrammed software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to insufficient verification of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.0136EPSS
SaveExploits2References3Affected Software4
Tenable Nessus
Tenable Nessus
•added 2023/06/12 12:00 a.m.•29 views

Fedora 37 : matrix-synapse (2023-eb65439ec0)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-eb65439ec0 advisory. Security fix for CVE-2022-39335 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

5CVSS6.1AI score0.00635EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/06/12 12:00 a.m.•25 views

Fedora: Security Advisory for matrix-synapse (FEDORA-2023-eb65439ec0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS7.1AI score0.00635EPSS
SaveExploits0References2
Fedora
Fedora
•added 2023/06/11 1:59 a.m.•43 views

[SECURITY] Fedora 37 Update: matrix-synapse-1.63.1-3.fc37

Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...

5CVSS5.2AI score0.00635EPSS
SaveExploits0
OSV
OSV
•added 2023/06/06 7:15 p.m.•7 views

DEBIAN-CVE-2023-32682

Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. In affected versions it may be possible for a deactivated user to login when using uncommon configurations. This only applies if any of the following are true: 1. JSON Web Tokens are enabled for login via the...

5.4CVSS6.6AI score0.00752EPSS
SaveExploits0References1
Rows per page
Query Builder