Lucene search
+L

622 matches found

Cvelist
Cvelist
•added 2024/05/30 4:01 p.m.•39 views

CVE-2024-35357

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=deleteitem. Manipulating the argument id can result in SQL injection...

7.7AI score0.00237EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/05/30 3:57 p.m.•43 views

CVE-2024-35358

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=viewcategory. Manipulating the argument id can result in SQL injection...

7.7AI score0.00407EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/05/30 3:57 p.m.•18 views

CVE-2024-35358

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=viewcategory. Manipulating the argument id can result in SQL injection...

7.1AI score0.00407EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/05/30 12:00 a.m.•18 views

Dino Physics School Assistant Security Breach

Dino Physics School Assistant is an application. A security vulnerability exists in Dino Physics School Assistant version 2.3, which stems from a SQL injection vulnerability in the parameter id of the file /classes/Master.php...

6.3CVSS7.9AI score0.00366EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/05/30 12:00 a.m.•12 views

Dino Physics School Assistant SQL Injection Vulnerability

Dino Physics School Assistant is an application. A SQL injection vulnerability exists in Dino Physics School Assistant version 2.3, which stems from unrecognized code in /classes/Master.php that causes SQL injection via the parameter id...

5.3CVSS8.2AI score0.00237EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/30 12:00 a.m.•5 views

CVE-2024-35354: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=savecategory. Manipulating the argument id can result in SQL injection...

9.8CVSS5.7AI score0.00654EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/05/30 12:00 a.m.•12 views

Dino Physics School Assistant Security Breach

Dino Physics School Assistant is an application. A security vulnerability exists in Dino Physics School Assistant version 2.3, which stems from a SQL injection vulnerability in the parameter id of the file /classes/Master.php...

6.5CVSS7.9AI score0.00407EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/05/30 12:00 a.m.•12 views

Dino Physics School Assistant Security Breach

Dino Physics School Assistant is an application. A security vulnerability exists in Dino Physics School Assistant version 2.3, which stems from a SQL injection vulnerability in the parameter id of the file /classes/Master.php...

9.8CVSS7.9AI score0.00654EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/30 12:00 a.m.•4 views

CVE-2024-35359: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=viewitem. Manipulating the argument id can result in SQL injection...

9.8CVSS5.7AI score0.00429EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/05/30 12:00 a.m.•13 views

PT-2024-26456 · Unknown · Diño Physics School Assistant

Name of the Vulnerable Software and Affected Versions: Diño Physics School Assistant version 2.3 Description: A vulnerability has been discovered that impacts an unidentified code within the file /classes/Master.php?f=delete item. Manipulating the id argument can result in SQL injection...

5.3CVSS7.3AI score0.00237EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/30 12:00 a.m.•2 views

CVE-2024-35358: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=viewcategory. Manipulating the argument id can result in SQL injection...

6.5CVSS5.7AI score0.00407EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/30 12:00 a.m.•2 views

CVE-2024-35357: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=deleteitem. Manipulating the argument id can result in SQL injection...

5.3CVSS5.7AI score0.00237EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/30 12:00 a.m.•2 views

CVE-2024-35355: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=deletecategory. Manipulating the argument id can result in SQL injection...

9.8CVSS5.7AI score0.00654EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/30 12:00 a.m.•4 views

CVE-2024-35356: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=saveitem. Manipulating the argument id can result in SQL injection...

6.3CVSS5.7AI score0.00366EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/05/30 12:00 a.m.•20 views

PT-2024-26453 · Unknown · Diño Physics School Assistant

Name of the Vulnerable Software and Affected Versions: Diño Physics School Assistant version 2.3 Description: A vulnerability has been discovered in the software, impacting an unidentified code within the file /classes/Master.php?f=save category. Manipulating the argument id can result in SQL...

9.8CVSS7.3AI score0.00654EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/20 12:00 a.m.•2 views

CVE-2024-5119: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Event Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php?f=loadregistration. The manipulation of the argument lastid/eventid leads to sql injection. The attack may be initiated...

9.8CVSS5.5AI score0.00579EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•13 views

Computer Laboratory Management System 安全漏洞

Computer Laboratory Management System is a computer laboratory management system. A security vulnerability exists in Sourcecodester Computer Laboratory Management System v1.0 that allows an attacker to execute arbitrary JavaScript code via the remarks, borrowername, facultydepartment parameters i...

5.4CVSS7.4AI score0.00443EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/09 12:00 a.m.•4 views

CVE-2024-31544: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by including malicious payloads into “remarks”, “borrowername”, “facultydepartment” parameters in /classes/Master.php?f=saverecord...

5.4CVSS6.1AI score0.00443EPSS
SaveExploits1References2
CVE
CVE
•added 2024/04/09 12:00 a.m.•61 views

CVE-2024-31544

The Computer Laboratory Management System v1.0 is affected by a stored cross-site scripting (XSS) vulnerability. An attacker can execute arbitrary JavaScript code by injecting malicious payloads into the remarks, borrower_name, or faculty_department parameters at the /classes/Master.php?f=save_re...

5.4CVSS5.8AI score0.00443EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/04/09 12:00 a.m.•12 views

CVE-2024-31544

A stored cross-site scripting XSS vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by including malicious payloads into “remarks”, “borrowername”, “facultydepartment” parameters in /classes/Master.php?f=saverecord...

5.8AI score0.00443EPSS
SaveExploits1References1
Rows per page
Query Builder