Lucene search
+L

1111 matches found

Cvelist
Cvelist
•added 2022/01/24 6:45 p.m.•35 views

CVE-2021-41928

SQL injection in Sourcecodester Try My Recipe Recipe Sharing Website - CMS 1.0 by oretnom23, allows attackers to execute arbitrary code via the rid parameter to the viewrecipe page...

10AI score0.01881EPSS
SaveExploits1References1
CVE
CVE
•added 2022/01/24 6:45 p.m.•63 views

CVE-2021-41928

The CVE-2021-41928 entry concerns Sourcecodester Try My Recipe (CMS) 1.0 by oretnom23. A SQL injection vulnerability exists in the rid parameter of the view_recipe page that could allow an attacker to execute arbitrary code. Connected documents (e.g., Red Hat CVE entry, CNVD/CNNVD mirrors) corrob...

9.8CVSS9.9AI score0.01881EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/01/24 6:17 p.m.•36 views

CVE-2021-42168

Cross Site Scripting XSS in Sourcecodester Try My Recipe Recipe Sharing Website - CMS by oretnom23, allows attackers to gain the PHPSESID or other unspecified impacts via the fullname parameter to the loginregistration page...

6.4AI score0.00725EPSS
SaveExploits1References1
CVE
CVE
•added 2022/01/24 6:17 p.m.•69 views

CVE-2021-42168

CVE-2021-42168 affects Sourcecodester Try My Recipe (a Recipe Sharing Website CMS). The vulnerability is a Cross Site Scripting (XSS) flaw in the fullname parameter of the login_registration page, caused by insufficient input filtering/escaping. The issue can enable an attacker to obtain the PHPS...

6.1CVSS6.2AI score0.00725EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/24 12:00 a.m.•5 views

CVE-2021-42168: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Sourcecodester Try My Recipe Recipe Sharing Website - CMS by oretnom23, allows attackers to gain the PHPSESID or other unspecified impacts via the fullname parameter to the loginregistration page...

6.1CVSS5.8AI score0.00725EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/01/24 12:00 a.m.•4 views

PT-2022-11549

Name of the Vulnerable Software and Affected Versions Sourcecodester Try My Recipe Recipe Sharing Website - CMS affected versions not specified Description The issue allows attackers to gain the PHPSESID or other unspecified impacts via the fullname parameter to the "login registration" page. Thi...

6.1CVSS0.00725EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/24 12:00 a.m.•4 views

CVE-2021-41928: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in Sourcecodester Try My Recipe Recipe Sharing Website - CMS 1.0 by oretnom23, allows attackers to execute arbitrary code via the rid parameter to the viewrecipe page...

9.8CVSS6.5AI score0.01881EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/01/24 12:00 a.m.•17 views

Try My Recipe SQL注入漏洞

Try My Recipe is a recipe sharing website for anyone who likes to cook to explore other people's recipes and post/share their own. A SQL injection vulnerability exists in Sourcecodester Try My Recipe due to a lack of filtering and escaping of SQL data in the rid parameter, which could be exploite...

9.8CVSS6.4AI score0.01881EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/01/24 12:00 a.m.•4 views

PT-2022-11506

Name of the Vulnerable Software and Affected Versions Sourcecodester Try My Recipe Recipe Sharing Website - CMS version 1.0 Description The issue allows attackers to execute arbitrary code via the rid parameter to the "view recipe" page. This enables attackers to perform SQL injection attacks,...

9.8CVSS0.01881EPSS
SaveExploits1References5
GithubExploit
GithubExploit
•added 2021/10/07 12:14 a.m.•585 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Playground === This is a small Docker recipe for...

7.5CVSS7.6AI score0.99992EPSS
SaveExploits169
GithubExploit
GithubExploit
•added 2021/10/07 12:14 a.m.•78 views

Exploit for Path Traversal in Apache Http_Server

CVE-2021-41773 Playground === This is a small Docker recipe for...

7.5CVSS7.6AI score0.99992EPSS
SaveExploits169
Packet Storm
Packet Storm
•added 2021/10/05 12:00 a.m.•295 views

Try My Recipe SQL Injection

https://www.sourcecodester.com/php/14964/try-my-recipe-recipe-sharing-website-cms-php-and-sqlite-free-source-code.html CVE-nu11-17-092921 Vendor MySQL Vulnerability Description: The cid parameter appears on Recipe Sharing Website - CMS by:oretnom23 to be vulnerable to SQL injection attacks. The...

0.3AI score
SaveExploits0
OSV
OSV
•added 2021/09/27 4:15 p.m.•18 views

CVE-2021-24632

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS5.8AI score0.00827EPSS
SaveExploits2References1
OSV
OSV
•added 2021/09/27 4:15 p.m.•20 views

CVE-2021-24634

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.3 does not properly sanitise or escape some of the properties of the Recipe Card Block such as ingredientsLayout, iconSet, steps, ingredients, recipeTitle, or settings, which could allow users with a role as low as contributor to perfor...

5.4CVSS6.1AI score0.00624EPSS
SaveExploits2References1
NVD
NVD
•added 2021/09/27 4:15 p.m.•21 views

CVE-2021-24634

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.3 does not properly sanitise or escape some of the properties of the Recipe Card Block such as ingredientsLayout, iconSet, steps, ingredients, recipeTitle, or settings, which could allow users with a role as low as contributor to perfor...

5.4CVSS0.00624EPSS
SaveExploits2References1
Prion
Prion
•added 2021/09/27 4:15 p.m.•23 views

Cross site scripting

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.3 does not properly sanitise or escape some of the properties of the Recipe Card Block such as ingredientsLayout, iconSet, steps, ingredients, recipeTitle, or settings, which could allow users with a role as low as contributor to perfor...

3.5CVSS5.3AI score0.00624EPSS
SaveExploits2References1Affected Software1
attackerkb
attackerkb
•added 2021/09/27 4:15 p.m.•9 views

CVE-2021-24634

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.3 does not properly sanitise or escape some of the properties of the Recipe Card Block such as ingredientsLayout, iconSet, steps, ingredients, recipeTitle, or settings, which could allow users with a role as low as contributor to perfor...

5.4CVSS6AI score0.00624EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2021/09/27 4:15 p.m.•9 views

CVE-2021-24632

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS6.3AI score0.00827EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2021/09/27 3:25 p.m.•33 views

CVE-2021-24634 Recipe Card Blocks < 2.8.3 - Contributor+ Stored Cross-Site Scripting

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.3 does not properly sanitise or escape some of the properties of the Recipe Card Block such as ingredientsLayout, iconSet, steps, ingredients, recipeTitle, or settings, which could allow users with a role as low as contributor to perfor...

5.5AI score0.00624EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2021/09/27 3:25 p.m.•41 views

CVE-2021-24632 Recipe Card Blocks < 2.8.1 - Reflected Cross-Site Scripting

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...

6.3AI score0.00827EPSS
SaveExploits2References1
Rows per page
Query Builder