Lucene search
+L

112 matches found

CVE
CVE
•added 2024/04/07 11:00 p.m.•81 views

CVE-2024-3433

CVE-2024-3433 affects PuneethReddyHC Event Management 1.0. Affected is an unknown function in the file /backend/register.php where manipulation of the parameters event_id, full_name, email, mobile, college, or branch yields cross-site scripting. Exploitation could be performed remotely. The vulne...

5.4CVSS3.7AI score0.0055EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/04/07 10:31 p.m.•44 views

CVE-2024-3432 PuneethReddyHC Event Management register.php sql injection

A vulnerability was found in PuneethReddyHC Event Management 1.0. It has been rated as critical. This issue affects some unknown processing of the file /backend/register.php. The manipulation of the argument eventid/fullname/email/mobile/college/branch leads to sql injection. The attack may be...

6.5CVSS6.2AI score0.0064EPSS
SaveExploits1References3
CVE
CVE
•added 2024/04/07 10:31 p.m.•94 views

CVE-2024-3432

CVE-2024-3432 affects PuneethReddyHC Event Management 1.0. The vulnerability is a SQL injection in the backend/register.php processing of parameters event_id/full_name/email/mobile/college/branch, exploitable remotely. Multiple sources confirm the issue and that the exploit has been disclosed pub...

8.8CVSS5.9AI score0.0064EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2024/04/07 12:00 a.m.•16 views

PT-2024-25788 · Unknown · Puneethreddyhc Event Management

Name of the Vulnerable Software and Affected Versions: PuneethReddyHC Event Management version 1.0 Description: A critical issue affects the processing of the file /backend/register.php, where the manipulation of the arguments event id, full name, email, mobile, college, or branch leads to sql...

8.8CVSS5.7AI score0.0064EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/07 12:00 a.m.•6 views

CVE-2024-3433: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in PuneethReddyHC Event Management 1.0. Affected is an unknown function of the file /backend/register.php. The manipulation of the argument eventid/fullname/email/mobile/college/branch leads to cross site scripting. It is possible to launch...

5.4CVSS4.1AI score0.0055EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/07 12:00 a.m.•4 views

CVE-2024-3432: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PuneethReddyHC Event Management 1.0. It has been rated as critical. This issue affects some unknown processing of the file /backend/register.php. The manipulation of the argument eventid/fullname/email/mobile/college/branch leads to sql injection. The attack may be...

8.8CVSS5.5AI score0.0064EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/07 12:00 a.m.•14 views

PT-2024-25790 · Unknown · Puneethreddyhc Event Management

Name of the Vulnerable Software and Affected Versions: PuneethReddyHC Event Management version 1.0 Description: A problematic vulnerability has been found in the software. The issue affects an unknown function of the file /backend/register.php. The manipulation of the arguments event id, full nam...

5.4CVSS3.8AI score0.0055EPSS
SaveExploits1References7
VulnCheck KEV
VulnCheck KEV
•added 2024/01/22 12:00 a.m.•14 views

VulnCheck KEV: CVE-2021-41649

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php catid parameter. Using a post request does not sanitize the user input...

9.8CVSS8.2AI score0.5177EPSS
SaveIn wildExploits2References559
OSV
OSV
•added 2023/06/20 12:15 p.m.•16 views

CVE-2023-3337

A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The atta...

9.8CVSS5.4AI score0.00693EPSS
SaveExploits0References2
Prion
Prion
•added 2023/06/20 12:15 p.m.•28 views

Authentication flaw

A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The atta...

7.5CVSS9.4AI score0.00693EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2023/06/20 12:00 p.m.•87 views

CVE-2023-3337

CVE-2023-3337 affects PuneethReddyHC Online Shopping System Advanced 1.0. Affected component: the Admin Registration function in the file /admin/reg.php, where manipulation leads to improper authentication. The vulnerability is described as exploitable remotely. Multiple connected sources corrobo...

9.8CVSS8.6AI score0.00693EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/06/20 12:00 p.m.•46 views

CVE-2023-3337 PuneethReddyHC Online Shopping System Advanced Admin Registration reg.php improper authentication

A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The atta...

7.5CVSS9.7AI score0.00693EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/06/20 12:00 a.m.•17 views

PT-2023-24318 · Unknown · Puneethreddyhc Online Shopping System

Name of the Vulnerable Software and Affected Versions: PuneethReddyHC Online Shopping System Advanced version 1.0 Description: A critical issue affects an unknown functionality of the file /admin/reg.php in the Admin Registration component, leading to improper authentication. This can be exploite...

9.8CVSS7.5AI score0.00693EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/20 12:00 a.m.•7 views

CVE-2023-3337: Improper Authentication

A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The atta...

9.8CVSS6.9AI score0.00693EPSS
SaveExploits0References2
OSV
OSV
•added 2023/06/18 3:15 p.m.•11 views

CVE-2023-3311

A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack...

5.4CVSS4AI score0.00588EPSS
SaveExploits1References3
NVD
NVD
•added 2023/06/18 3:15 p.m.•37 views

CVE-2023-3311

A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack...

5.4CVSS4AI score0.00588EPSS
SaveExploits1References3
Prion
Prion
•added 2023/06/18 3:15 p.m.•29 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack...

3.3CVSS5.3AI score0.00588EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/06/18 3:00 p.m.•14 views

CVE-2023-3311 PuneethReddyHC online-shopping-system-advanced addsuppliers.php cross site scripting

A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack...

3.3CVSS6.4AI score0.00588EPSS
SaveExploits1References3
CVE
CVE
•added 2023/06/18 3:00 p.m.•52 views

CVE-2023-3311

CVE-2023-3311 affects the PuneethReddyHC online-shopping-system-advanced 1.0. The vulnerability is in the addsuppliers.php file, where manipulating the First name parameter leads to cross-site scripting. It can be triggered remotely and public exploits exist. Connected sources also recommend rest...

5.4CVSS4AI score0.00588EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/06/18 3:00 p.m.•44 views

CVE-2023-3311 PuneethReddyHC online-shopping-system-advanced addsuppliers.php cross site scripting

A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack...

3.3CVSS5.5AI score0.00588EPSS
SaveExploits1References3
Rows per page
Query Builder