Lucene search
+L

106 matches found

CVE
CVE
added 2023/10/04 1:31 p.m.47 views

CVE-2023-5374

CVE-2023-5374 affects the SourceCodester Online Computer and Laptop Store 1.0. The vulnerability is in the file products.php where manipulation of the argument c leads to an SQL injection. Exploitation can be performed remotely and the vulnerability has been publicly disclosed. The highest CVSS r...

9.8CVSS8.4AI score0.00722EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/10/04 12:31 p.m.33 views

CVE-2023-5373 SourceCodester Online Computer and Laptop Store Master.php register sql injection

A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is the function register of the file Master.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

7.5CVSS10AI score0.00805EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/10/04 12:31 p.m.21 views

CVE-2023-5373 SourceCodester Online Computer and Laptop Store Master.php register sql injection

A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is the function register of the file Master.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

7.5CVSS7.4AI score0.00805EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/10/04 12:0 a.m.7 views

Online Computer and Laptop Store SQL Injection Vulnerability

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. SourceCodester Online Computer and Laptop Store version 1.0 suffers from a SQL injection vulnerability that originates from a SQL injection vulnerability in the Master.php file...

9.8CVSS8AI score0.00805EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/10/04 12:0 a.m.8 views

PT-2023-32074 · Sourcecodester · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical vulnerability has been found in the function register of the file Master.php. The manipulation of the argument email leads to sql injection. It is possible to...

9.8CVSS7.6AI score0.00805EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2023/10/04 12:0 a.m.9 views

Online Computer and Laptop Store SQL Injection Vulnerability

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Computer and Laptop Store version 1.0, which originates from a SQL injection vulnerability in the file products.php...

9.8CVSS7.9AI score0.00722EPSS
SaveExploits1References4
CVE
CVE
added 2023/07/13 12:0 a.m.50 views

CVE-2023-31704

The CVE-2023-31704 entry concerns Sourcecodester Online Computer and Laptop Store 1.0, which suffers from Incorrect Access Control that enables remote attackers to elevate privileges to the administrator’s role. The Red Hat/NVD-derived collateral confirms the affected product and impact (privileg...

9.8CVSS9.4AI score0.01312EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/13 12:0 a.m.10 views

PT-2023-23424 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Computer and Laptop Store version 1.0 Description: The issue allows remote attackers to elevate privileges to the administrator's role due to Incorrect Access Control. Recommendations: For Sourcecodester Online Computer...

9.8CVSS7.1AI score0.01312EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/07/13 12:0 a.m.8 views

Online Computer and Laptop Store 安全漏洞

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. A security vulnerability exists in version 1.0 of Sourcecodester Online Computer and Laptop Store, which stems from vulnerability to a false access control attack that allows a remote...

9.8CVSS8.4AI score0.01312EPSS
SaveExploits1References3
CNVD
CNVD
added 2023/05/18 12:0 a.m.8 views

Online Computer and Laptop Store Arbitrary File Upload Vulnerability (CNVD-2023-40599)

Online Computer and Laptop Store is an online computer and laptop store. An arbitrary file upload vulnerability exists in Online Computer and Laptop Store v1.0, which stems from a failure to restrict file uploads at /classes/Users.php?f=save, and can be exploited by an attacker to cause remote co...

9.8CVSS7.8AI score0.01519EPSS
SaveExploits1References1
NVD
NVD
added 2023/05/16 3:15 p.m.26 views

CVE-2023-31857

Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save...

9.8CVSS9.8AI score0.01519EPSS
SaveExploits1References1
Prion
Prion
added 2023/05/16 3:15 p.m.22 views

Remote code execution

Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save...

7.5CVSS9.7AI score0.01519EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/05/16 12:0 a.m.38 views

CVE-2023-31857

Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save...

10AI score0.01519EPSS
SaveExploits1References1
CVE
CVE
added 2023/05/16 12:0 a.m.59 views

CVE-2023-31857

CVE-2023-31857 affects Sourcecodester Online Computer and Laptop Store 1.0. The vulnerability is an unrestricted file upload via the endpoint /classes/Users.php?f=save, enabling remote code execution. References and metadata consistently describe this path and the high impact (CVSS 3.1: 9.8, NET/...

9.8CVSS9.7AI score0.01519EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2023/05/11 3:15 p.m.26 views

CVE-2023-2661

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit ha...

9.8CVSS7.4AI score0.0082EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/05/11 3:0 p.m.39 views

CVE-2023-2661 SourceCodester Online Computer and Laptop Store Master.php sql injection

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit ha...

6.5CVSS10AI score0.0082EPSS
SaveExploits1References3
CVE
CVE
added 2023/05/11 3:0 p.m.53 views

CVE-2023-2661

SourceCodester Online Computer and Laptop Store 1.0 is affected by CVE-2023-2661. The vulnerability resides in /classes/Master.php where manipulating the id parameter leads to an SQL injection. Exploitation can be remote, and public disclosures exist. Multiple sources (NVD CVSSv3.1 base 9.8; othe...

9.8CVSS8.3AI score0.0082EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/05/11 3:0 p.m.140 views

CVE-2023-2660

CVE-2023-2660 affects SourceCodester Online Computer and Laptop Store 1.0. A SQL injection vulnerability exists in the view_categories.php file via the c parameter, allowing remote attackers to manipulate the database. The issue’s impact is described as high confidentiality, integrity, and availa...

9.8CVSS8.3AI score0.0082EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/05/11 2:31 p.m.54 views

CVE-2023-2659

CVE-2023-2659 affects SourceCodester Online Computer and Laptop Store 1.0. The vulnerability exists in the view_product.php file, where manipulating the id parameter leads to SQL injection. It is exploitable remotely, and the public exploit is known. Multiple connected sources confirm the issue a...

9.8CVSS8.3AI score0.0082EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2023/05/11 2:15 p.m.21 views

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file products.php. The manipulation of the argument c leads to sql injection. The attack may be launched remotely...

6.5CVSS9.6AI score0.00881EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder