1459 matches found
Sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Game Result Matrix System 1.0. This affects an unknown part of the file /dipam/athlete-profile.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...
CVE-2023-3382
A vulnerability, which was classified as problematic, has been found in SourceCodester Game Result Matrix System 1.0. Affected by this issue is some unknown functionality of the file /dipam/save-delegates.php of the component GET Parameter Handler. The manipulation of the argument delname leads t...
CVE-2023-3382
A vulnerability, which was classified as problematic, has been found in SourceCodester Game Result Matrix System 1.0. Affected by this issue is some unknown functionality of the file /dipam/save-delegates.php of the component GET Parameter Handler. The manipulation of the argument delname leads t...
Cross site scripting
A vulnerability, which was classified as problematic, has been found in SourceCodester Game Result Matrix System 1.0. Affected by this issue is some unknown functionality of the file /dipam/save-delegates.php of the component GET Parameter Handler. The manipulation of the argument delname leads t...
CVE-2023-3383 SourceCodester Game Result Matrix System GET Parameter athlete-profile.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Game Result Matrix System 1.0. This affects an unknown part of the file /dipam/athlete-profile.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...
CVE-2023-3383
CVE-2023-3383 affects SourceCodester Game Result Matrix System 1.0. The vulnerability is in the GET Parameter Handler for /dipam/athlete-profile.php, where manipulation of the id argument leads to SQL injection. It can be exploited remotely and the exploit has been disclosed publicly. Multiple so...
CVE-2023-3382
CVE-2023-3382 affects SourceCodester Game Result Matrix System 1.0. The vulnerability resides in the GET Parameter Handler for the /dipam/save-delegates.php endpoint, where improper handling of the del_name parameter allows cross-site scripting. The issue can be exploited remotely and the exploit...
CVE-2023-3382 SourceCodester Game Result Matrix System GET Parameter save-delegates.php cross site scripting
A vulnerability, which was classified as problematic, has been found in SourceCodester Game Result Matrix System 1.0. Affected by this issue is some unknown functionality of the file /dipam/save-delegates.php of the component GET Parameter Handler. The manipulation of the argument delname leads t...
CVE-2023-3382: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in SourceCodester Game Result Matrix System 1.0. Affected by this issue is some unknown functionality of the file /dipam/save-delegates.php of the component GET Parameter Handler. The manipulation of the argument delname leads t...
CVE-2023-3383: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in SourceCodester Game Result Matrix System 1.0. This affects an unknown part of the file /dipam/athlete-profile.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...
SourceCodester Game Result Matrix System SQL注入漏洞
Game Result Matrix System is a game system by the individual developer imarkpatric. A SQL injection vulnerability exists in SourceCodester Game Result Matrix System version 1.0, which stems from a problem in the file /dipam/athlete-profile.php, where manipulation of the parameter id can lead to s...
Game Result Matrix System 跨站脚本漏洞
Game Result Matrix System is a game system by the individual developer imarkpatric. A cross-site scripting vulnerability exists in version 1.0 of the SourceCodester Game Result Matrix System, which stems from a problem with the file /dipam/save-delegates.php, where incorrect manipulation of the...
word-wrap 安全漏洞
word-wrap is a library by Jon Schlinkert, an individual developer in the United States. It is used to wrap words to a specified length. A security vulnerability exists in word-wrap, which stems from the use of an insecure regular expression in the result variable...
CVE-2023-26115: Inefficient Regular Expression Complexity
All versions of the package word-wrap are vulnerable to Regular Expression Denial of Service ReDoS due to the usage of an insecure regular expression within the result variable...
PT-2023-4760
Name of the Vulnerable Software and Affected Versions word-wrap versions all Description The issue is related to the use of a regular expression with inefficient computational complexity in the word-wrap module of the Node.js platform. This can be exploited by a remote attacker to cause a denial ...
CVE-2023-33591
User Registration & Login and User Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/search-result.php...
CVE-2023-33591
User Registration & Login and User Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/search-result.php...
CVE-2023-33591
User Registration & Login and User Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/search-result.php...
Cross site scripting
User Registration & Login and User Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /admin/search-result.php...