Lucene search
+L

321 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/26 12:00 a.m.•6 views

CVE-2023-1039: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index3.php of the component POST Parameter Handler. The manipulation of the argument password leads to sql...

8.8CVSS5.5AI score0.00791EPSS
SaveExploits1References2
OSV
OSV
•added 2023/02/24 8:15 p.m.•15 views

CVE-2023-1030

A vulnerability has been found in SourceCodester/code-projects Online Boat Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un lead...

6.1CVSS3.8AI score0.00654EPSS
SaveExploits1References4
NVD
NVD
•added 2023/02/24 8:15 p.m.•58 views

CVE-2023-1030

A vulnerability has been found in SourceCodester/code-projects Online Boat Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un lead...

6.1CVSS4.5AI score0.00654EPSS
SaveExploits1References4
Prion
Prion
•added 2023/02/24 8:15 p.m.•25 views

Cross site scripting

A vulnerability has been found in SourceCodester Online Boat Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un leads to cross sit...

4CVSS6AI score0.00654EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/02/24 7:36 p.m.•64 views

CVE-2023-1030 SourceCodester/code-projects Online Boat Reservation System POST Parameter login.php cross site scripting

A vulnerability has been found in SourceCodester/code-projects Online Boat Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un lead...

5.1CVSS6.2AI score0.00654EPSS
SaveExploits1References4
OSV
OSV
•added 2023/02/24 8:15 a.m.•15 views

CVE-2023-0997

A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...

8.8CVSS6.8AI score0.00912EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/02/24 7:29 a.m.•37 views

CVE-2023-0997 SourceCodester Moosikay E-Commerce System POST Parameter order.php sql injection

A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...

7.5CVSS9.1AI score0.00912EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/24 12:00 a.m.•3 views

CVE-2023-0997: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...

8.8CVSS5.5AI score0.00912EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/24 12:00 a.m.•5 views

CVE-2023-1030: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester/code-projects Online Boat Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un lead...

6.1CVSS3.8AI score0.00654EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/18 12:00 a.m.•5 views

CVE-2023-0906: Missing Authentication for Critical Function

A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0. Affected by this vulnerability is the function deletecategory of the file ajax.php of the component POST Parameter Handler. The manipulation leads to missing authentication. The attack can be...

9.8CVSS5.4AI score0.00658EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/02/18 12:00 a.m.•18 views

PT-2023-16608 · Unknown · Sourcecodester Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: A critical issue was found in the function delete category of the file ajax.php of the component POST Parameter Handler, leading to missing authentication. The attack can be...

9.8CVSS7AI score0.00658EPSS
SaveExploits0References4
NVD
NVD
•added 2023/01/13 10:15 a.m.•31 views

CVE-2023-0283

A vulnerability classified as critical has been found in SourceCodester Online Flight Booking Management System. This affects an unknown part of the file reviewsearch.php of the component POST Parameter Handler. The manipulation of the argument txtsearch leads to sql injection. It is possible to...

9.8CVSS7.4AI score0.00743EPSS
SaveExploits1References3
CVE
CVE
•added 2023/01/13 9:20 a.m.•81 views

CVE-2023-0283

CVE-2023-0283 : A SQL injection vulnerability exists in SourceCodester Online Flight Booking Management System, in the file review_search.php within the POST Parameter Handler component. An attacker can manipulate the txtsearch argument to trigger the injection, with remote attack possible and pu...

9.8CVSS8.3AI score0.00743EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/13 12:00 a.m.•5 views

CVE-2023-0283: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Online Flight Booking Management System. This affects an unknown part of the file reviewsearch.php of the component POST Parameter Handler. The manipulation of the argument txtsearch leads to sql injection. It is possible to...

9.8CVSS5.5AI score0.00743EPSS
SaveExploits1References2
NVD
NVD
•added 2023/01/05 9:15 a.m.•43 views

CVE-2022-4869

A vulnerability was found in Evolution Events Artaxerxes. It has been declared as problematic. This vulnerability affects unknown code of the file arta/common/middleware.py of the component POST Parameter Handler. The manipulation of the argument password leads to information disclosure. The atta...

7.5CVSS5.1AI score0.00632EPSS
SaveExploits0References3
Prion
Prion
•added 2023/01/05 9:15 a.m.•35 views

Information disclosure

A vulnerability was found in Evolution Events Artaxerxes. It has been declared as problematic. This vulnerability affects unknown code of the file arta/common/middleware.py of the component POST Parameter Handler. The manipulation of the argument password leads to information disclosure. The atta...

5CVSS7.5AI score0.00632EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2023/01/05 8:04 a.m.•2 views

CVE-2022-4869

A vulnerability was found in Evolution Events Artaxerxes. It has been declared as problematic. This vulnerability affects unknown code of the file arta/common/middleware.py of the component POST Parameter Handler. The manipulation of the argument password leads to information disclosure. The atta...

7.5CVSS0.00632EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2023/01/05 8:04 a.m.•37 views

CVE-2022-4869 Evolution Events Artaxerxes POST Parameter middleware.py information disclosure

A vulnerability was found in Evolution Events Artaxerxes. It has been declared as problematic. This vulnerability affects unknown code of the file arta/common/middleware.py of the component POST Parameter Handler. The manipulation of the argument password leads to information disclosure. The atta...

4CVSS7.7AI score0.00632EPSS
SaveExploits0References3
OSV
OSV
•added 2023/01/05 8:04 a.m.•27 views

CVE-2022-4869 Evolution Events Artaxerxes POST Parameter middleware.py information disclosure

A vulnerability was found in Evolution Events Artaxerxes. It has been declared as problematic. This vulnerability affects unknown code of the file arta/common/middleware.py of the component POST Parameter Handler. The manipulation of the argument password leads to information disclosure. The atta...

3.5CVSS5.3AI score
SaveExploits0References5
CVE
CVE
•added 2023/01/05 8:04 a.m.•73 views

CVE-2022-4869

CVE-2022-4869 affects Evolution Events Artaxerxes, specifically the POST Parameter Handler component in the file arta/common/middleware.py. The issue is described as the manipulation of the password argument that leads to information disclosure, with the attack noted as remote. The available conn...

7.5CVSS5.7AI score0.00632EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder