Lucene search
+L

11811 matches found

Prion
Prion
added 2023/12/02 9:15 a.m.34 views

Sql injection

A vulnerability was found in SourceCodester User Registration and Login System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument user leads to sql injection. The attack may be launched remotely...

6.5CVSS7.6AI score0.00796EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/12/02 9:00 a.m.50 views

CVE-2023-6464

CVE-2023-6464 affects SourceCodester User Registration and Login System 1.0. The vulnerability lies in the file /endpoint/add-user.php where mutating the user parameter leads to SQL injection. Attacks can be launched remotely, and exploits have been publicly disclosed. Remediation guidance in con...

9.8CVSS8.2AI score0.00796EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/02 9:00 a.m.40 views

CVE-2023-6464 SourceCodester User Registration and Login System add-user.php sql injection

A vulnerability was found in SourceCodester User Registration and Login System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument user leads to sql injection. The attack may be launched remotely...

6.5CVSS9.9AI score0.00796EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/12/02 12:00 a.m.13 views

SourceCodester User Registration and Login System SQL Injection Vulnerability

User Registration and Login System is a user registration and login system by Remy Andrade, an individual developer. A SQL injection vulnerability exists in the SourceCodester User Registration and Login System, which originates from an SQL injection in the user parameter of /endpoint/add-user.ph...

9.8CVSS8AI score0.00796EPSS
SaveExploits1References3
OSV
OSV
added 2023/12/01 11:15 p.m.9 views

CVE-2023-6463

A vulnerability has been found in SourceCodester User Registration and Login System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument firstname leads to cross site scripting. The attac...

5.4CVSS3.8AI score0.00604EPSS
SaveExploits1References3
Prion
Prion
added 2023/12/01 11:15 p.m.30 views

Cross site scripting

A vulnerability has been found in SourceCodester User Registration and Login System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument firstname leads to cross site scripting. The attac...

4CVSS6.5AI score0.00604EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/12/01 10:31 p.m.50 views

CVE-2023-6463

CVE-2023-6463 affects SourceCodester User Registration and Login System 1.0. The vulnerability is in the /endpoint/add-user.php endpoint, where manipulation of the first_name argument leads to cross-site scripting. A remote attacker could exploit this, and public disclosure is noted. No authorita...

5.4CVSS4.4AI score0.00604EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2023/12/01 10:15 p.m.28 views

CVE-2023-6462

A vulnerability, which was classified as problematic, was found in SourceCodester User Registration and Login System 1.0. Affected is an unknown function of the file /endpoint/delete-user.php. The manipulation of the argument user leads to cross site scripting. It is possible to launch the attack...

6.1CVSS0.00608EPSS
SaveExploits1References3
CVE
CVE
added 2023/12/01 9:31 p.m.50 views

CVE-2023-6462

CVE-2023-6462 pertains to the SourceCodester User Registration and Login System 1.0. The vulnerability is an XSS in the file /endpoint/delete-user.php triggered by manipulating the user parameter, described as a remote-executable issue. Multiple connected records (NVD, CVE listings, and related d...

6.1CVSS4.8AI score0.00608EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/12/01 12:00 a.m.14 views

SourceCodester User Registration and Login System Cross-Site Scripting Vulnerability

User Registration and Login System is a user registration and login system by Remy Andrade, an individual developer. A cross-site scripting vulnerability exists in the SourceCodester User Registration and Login System, which is caused by cross-site scripting in the user parameter of...

6.1CVSS6.2AI score0.00608EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/12/01 12:00 a.m.24 views

The vulnerability of the command shell of ZySH microprogramming software for network devices such as ZyXEL USG FLEX and ATP allows a hacker to alter the URL address of the registration page.

The vulnerability of the command shell of the ZySH microprogramming software for ZyXEL USG FLEX, VPN, and ATP is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to alter the URL address of the registration page through the web interface...

5.5CVSS5.9AI score0.00214EPSS
SaveExploits0References3Affected Software5
CNNVD
CNNVD
added 2023/12/01 12:00 a.m.49 views

SourceCodester User Registration and Login System Cross-Site Scripting Vulnerability

User Registration and Login System is a user registration and login system by Remy Andrade, an individual developer. A cross-site scripting vulnerability exists in the SourceCodester User Registration and Login System, which originates from cross-site scripting in the firstname parameter of...

5.4CVSS6.1AI score0.00604EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/12/01 12:00 a.m.12 views

PT-2023-32675 · Sourcecodester · Sourcecodester User Registration/Login System

Name of the Vulnerable Software and Affected Versions: SourceCodester User Registration and Login System version 1.0 Description: A problematic issue was found in the system, affecting an unknown function of the file /endpoint/delete-user.php. The manipulation of the user argument leads to...

6.1CVSS4.4AI score0.00608EPSS
SaveExploits1References5
NVD
NVD
added 2023/11/30 3:15 p.m.25 views

CVE-2023-44150

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress.This issue affects Paid Membership Plugin, Ecommerce, Registration Form, Login...

7.5CVSS0.00658EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/30 3:15 p.m.10 views

CVE-2023-44150

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress.This issue affects Paid Membership Plugin, Ecommerce, Registration Form, Login...

7.5CVSS7.3AI score0.00658EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/30 2:50 p.m.90 views

CVE-2023-44150

CVE-2023-44150 affects ProfilePress (Paid Membership Plugin) for WordPress; versions

7.5CVSS7.7AI score0.00658EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/11/30 2:15 p.m.11 views

CVE-2023-47645

Cross-Site Request Forgery CSRF vulnerability in RegistrationMagic RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login allows Cross Site Request Forgery.This issue affects RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User...

8.8CVSS7.3AI score0.00261EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/30 2:15 p.m.20 views

CVE-2023-47645

Cross-Site Request Forgery CSRF vulnerability in RegistrationMagic RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login allows Cross Site Request Forgery.This issue affects RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User...

8.8CVSS0.00261EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/30 2:15 p.m.26 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in RegistrationMagic RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login allows Cross Site Request Forgery.This issue affects RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User...

6.8CVSS7.2AI score0.00261EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/30 1:34 p.m.91 views

CVE-2023-47645

CVE-2023-47645 concerns the RegistrationMagic WordPress plugin. A CSRF vulnerability affects RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login, with exposure noted for versions n/a through 5.2.2.6. Public references document the vulnerability and list a pat...

8.8CVSS8.4AI score0.00261EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder