Lucene search
+L

229 matches found

CVE
CVE
added 2022/10/15 12:00 a.m.66 views

CVE-2022-3519

SourceCodester Sanitization Management System 1.0 contains a cross-site scripting vulnerability in the Quote Requests Tab triggered by manipulating the Manage Remarks parameter. The issue can be exploited remotely; versions and specific affected files are not explicitly enumerated beyond the 1.0 ...

6.1CVSS4.8AI score0.00357EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/10/15 12:00 a.m.72 views

CVE-2022-3518

CVE-2022-3518 affects SourceCodester Sanitization Management System 1.0, specifically the User Creation Handler . The vulnerability arises from manipulation of the arguments for the name fields (First Name, Middle Name, Last Name), leading to cross-site scripting (XSS) . It is described as exploi...

4.8CVSS4.3AI score0.00557EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/10/15 12:00 a.m.43 views

CVE-2022-3518 SourceCodester Sanitization Management System User Creation cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Sanitization Management System 1.0. Affected is an unknown function of the component User Creation Handler. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is possible to...

2.4CVSS5.2AI score0.00557EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/10/15 12:00 a.m.40 views

CVE-2022-3519 SourceCodester Sanitization Management System Quote Requests Tab cross site scripting

A vulnerability classified as problematic was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Quote Requests Tab. The manipulation of the argument Manage Remarks leads to cross site scripting. The attack can b...

2.4CVSS6.2AI score0.00357EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/10/15 12:00 a.m.8 views

PT-2022-22621 · Sourcecodester · Sourcecodester Sanitization Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Sanitization Management System version 1.0 Description: A problematic issue was found in the Quote Requests Tab component, where the manipulation of the Manage Remarks argument leads to cross-site scripting. The attack can be...

6.1CVSS5.9AI score0.00357EPSS
SaveExploits0References3
CVE
CVE
added 2022/10/14 12:00 a.m.56 views

CVE-2022-3505

CVE-2022-3505 affects SourceCodester Sanitization Management System. The vulnerability is a cross-site scripting flaw in an unknown function under /php-sms/admin/, caused by manipulation of the page parameter. It can be exploited remotely and the exploit has been disclosed publicly (per multiple ...

5.4CVSS4.4AI score0.005EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2022/10/14 12:00 a.m.55 views

CVE-2022-3504

The CVE-2022-3504 entry describes a SQL injection vulnerability in SourceCodester Sanitization Management System, triggered by manipulating the id parameter in the URL path /php-sms/?p=services/view_service. The issue is framed as critical with remote attack potential and the vulnerability affect...

9.8CVSS8.3AI score0.00638EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/10/14 12:00 a.m.37 views

CVE-2022-3505 SourceCodester Sanitization Management System cross site scripting

A vulnerability was found in SourceCodester Sanitization Management System. It has been classified as problematic. Affected is an unknown function of the file /php-sms/admin/. The manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The...

3.5CVSS5.5AI score0.005EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/10/14 12:00 a.m.26 views

CVE-2022-3504 SourceCodester Sanitization Management System sql injection

A vulnerability was found in SourceCodester Sanitization Management System and classified as critical. This issue affects some unknown processing of the file /php-sms/?p=services/viewservice. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

6.3CVSS10AI score0.00638EPSS
SaveExploits1References2
Rows per page
Query Builder