Lucene search
+L

26 matches found

RedhatCVE
RedhatCVE
•added 2025/04/18 2:00 a.m.•44 views

CVE-2024-40072

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index=1...

9.8CVSS8.3AI score0.00497EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/04/18 1:57 a.m.•42 views

CVE-2024-40073

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at idgenerator/admin/?page=generate=4...

9.8CVSS8.3AI score0.00497EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/16 5:15 p.m.•39 views

CVE-2024-40072

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index&id=1...

9.8CVSS0.00497EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/16 5:15 p.m.•33 views

CVE-2024-40074

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/SystemSettings.php?f=updatesettings, and the point of vulnerability is in the POST parameter 'shortname'...

4.8CVSS0.00267EPSS
SaveExploits1References1
OSV
OSV
•added 2025/04/16 5:15 p.m.•19 views

CVE-2024-40074

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/SystemSettings.php?f=updatesettings, and the point of vulnerability is in the POST parameter 'shortname'...

4.8CVSS5.8AI score0.00267EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/16 5:15 p.m.•36 views

CVE-2024-40068

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=templates/managetemplate&id=1...

5.9CVSS0.00246EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/16 5:15 p.m.•34 views

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/Users.php?f=save, and the point of vulnerability is in the POST parameter 'firstname' and 'lastname'...

5.4CVSS0.00273EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/16 5:15 p.m.•26 views

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

5.1CVSS0.00258EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•7 views

PT-2025-16795

Name of the Vulnerable Software and Affected Versions Sourcecodester Online ID Generator System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the template parameter at the "/id generator/admin/?page=generate&template=4"...

9.8CVSS5.9AI score0.00497EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•7 views

PT-2025-16794

Name of the Vulnerable Software and Affected Versions Sourcecodester Online ID Generator System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the id parameter at the API endpoint "/id generator/admin/?page=generate/index&id=1"...

9.8CVSS5.9AI score0.00497EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/16 12:00 a.m.•4 views

CVE-2024-40068: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=templates/managetemplate&id=1...

5.9CVSS5.8AI score0.00246EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/04/16 12:00 a.m.•14 views

CVE-2024-40074

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/SystemSettings.php?f=updatesettings, and the point of vulnerability is in the POST parameter 'shortname'...

6.5AI score0.00267EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/04/16 12:00 a.m.•13 views

CVE-2024-40072

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index&id=1...

8.5AI score0.00497EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•5 views

PT-2025-16785

Name of the Vulnerable Software and Affected Versions Sourcecodester Online ID Generator System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/id generator/admin/?page=templates/manage template&id=1"...

5.9CVSS5.9AI score0.00246EPSS
SaveExploits1References5
CVE
CVE
•added 2025/04/16 12:00 a.m.•85 views

CVE-2024-40072

The Sourcecodester Online ID Generator System version 1.0 contains a SQL injection vulnerability (CWE-89) caused by the incorrect manipulation of the id parameter. The flaw is accessible via the endpoint id_generator/admin/?page=generate/index&id=1 . This vulnerability allows for unauthorized dat...

9.8CVSS7.9AI score0.00497EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•7 views

PT-2025-16786

Name of the Vulnerable Software and Affected Versions Sourcecodester Online ID Generator System version 1.0 Description The issue is related to Stored Cross Site Scripting XSS via the endpoint "id generator/classes/Users.php?f=save". The vulnerability is specifically in the POST parameters...

5.4CVSS6AI score0.00273EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/16 12:00 a.m.•7 views

CVE-2024-40071: Unrestricted Upload of File with Dangerous Type

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS6.5AI score0.00765EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/16 12:00 a.m.•9 views

CVE-2024-40070: Improper Neutralization of Special Elements used in a Command

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

5.1CVSS6.5AI score0.00258EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/04/16 12:00 a.m.•44 views

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/Users.php?f=save, and the point of vulnerability is in the POST parameter 'firstname' and 'lastname'...

0.00273EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/16 12:00 a.m.•7 views

CVE-2024-40069: Improper Neutralization of Input During Web Page Generation

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/Users.php?f=save, and the point of vulnerability is in the POST parameter 'firstname' and 'lastname'...

5.4CVSS5.8AI score0.00273EPSS
SaveExploits1References1
Rows per page
Query Builder