Lucene search
+L

853 matches found

CVE
CVE
•added 2023/04/27 2:00 p.m.•73 views

CVE-2023-2345

CVE-2023-2345 pertains to SourceCodester Service Provider Management System 1.0. Affected component: /classes/Master.php?f=delete_inquiry, where the issue enables improper authorization and can be exploited remotely. Multiple connected sources consistently describe a critical risk tied to this de...

9.8CVSS7.9AI score0.00511EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/04/27 2:00 p.m.•45 views

CVE-2023-2345 SourceCodester Service Provider Management System improper authorization

A vulnerability was found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=deleteinquiry. The manipulation leads to improper authorization. The attack may be launched remotel...

6.5CVSS9.6AI score0.00511EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/04/27 2:00 p.m.•48 views

CVE-2023-2344 SourceCodester Service Provider Management System HTTP POST Request sql injection

A vulnerability has been found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=saveservice of the component HTTP POST Request Handler. The manipulation of the argument...

6.5CVSS10AI score0.00834EPSS
SaveExploits1References3
CVE
CVE
•added 2023/04/27 2:00 p.m.•71 views

CVE-2023-2344

The CVE-2023-2344 entry concerns SourceCodester Service Provider Management System 1.0. A SQL injection vulnerability exists in the HTTP POST endpoint at /classes/Master.php?f=save_service caused by manipulation of the name parameter in the request. The issue is exploitable remotely and the explo...

9.8CVSS8.3AI score0.00834EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2023/04/27 12:00 a.m.•17 views

Service Provider Management System SQL注入漏洞

Service Provider Management System is a web-based application by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A SQL injection vulnerability exists in Service Provider Management System version 1.0, which can be exploited by...

9.8CVSS8.2AI score0.0082EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/04/27 12:00 a.m.•14 views

PT-2023-18959 · Sourcecodester · Sourcecodester Service Provider Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Service Provider Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /classes/Master.php?f=delete inquiry. This issue leads to improper...

9.8CVSS6.5AI score0.00511EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/04/27 12:00 a.m.•15 views

Service Provider Management System SQL注入漏洞

Service Provider Management System is a web-based application by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A SQL injection vulnerability exists in Service Provider Management System version 1.0, which is caused by an incorre...

9.8CVSS8.3AI score0.00834EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/04/27 12:00 a.m.•16 views

Service Provider Management System SQL注入漏洞

Service Provider Management System is a web-based application by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A SQL injection vulnerability exists in Service Provider Management System version 1.0, which can be exploited by...

9.8CVSS8.2AI score0.0082EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/04/27 12:00 a.m.•21 views

PT-2023-18978 · Sourcecodester · Sourcecodester Service Provider Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Service Provider Management System version 1.0 Description: A critical issue has been discovered, affecting the file /admin/services/manage service.php. The manipulation of the id argument leads to sql injection. This issue can...

9.8CVSS7AI score0.0082EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/04/27 12:00 a.m.•14 views

Service Provider Management System 跨站脚本漏洞

Service Provider Management System is a web-based application by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A cross-site scripting vulnerability exists in Service Provider Management System version 1.0, which can be exploited...

5.4CVSS6.2AI score0.00564EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/04/27 12:00 a.m.•17 views

PT-2023-18980 · Unknown · Sourcecodester Service Provider Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Service Provider Management System version 1.0 Description: A critical issue affects the processing of the file /admin/user/manage user.php, where the manipulation of the id argument leads to sql injection. The attack can be...

9.8CVSS7AI score0.0082EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/27 12:00 a.m.•1 views

CVE-2023-2348: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/user/manageuser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. T...

9.8CVSS5.5AI score0.0082EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/27 12:00 a.m.•2 views

CVE-2023-2346: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/inquiries/viewinquiry.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

9.8CVSS5.5AI score0.0082EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/27 12:00 a.m.•1 views

CVE-2023-2345: Improper Authorization

A vulnerability was found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=deleteinquiry. The manipulation leads to improper authorization. The attack may be launched remotel...

9.8CVSS5.5AI score0.00511EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/27 12:00 a.m.•2 views

CVE-2023-2344: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=saveservice of the component HTTP POST Request Handler. The manipulation of the argument...

9.8CVSS5.5AI score0.00834EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/04/27 12:00 a.m.•15 views

PT-2023-18984 · Unknown · Sourcecodester Service Provider Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Service Provider Management System version 1.0 Description: A vulnerability has been found in the SourceCodester Service Provider Management System. The issue is related to an unknown function of the file /admin/index.php, wher...

5.4CVSS4.2AI score0.00564EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/27 12:00 a.m.•2 views

CVE-2023-2350: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched...

5.4CVSS3.9AI score0.00564EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/04/27 12:00 a.m.•12 views

Service Provider Management System 跨站脚本漏洞

Service Provider Management System is a web-based application by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A cross-site scripting vulnerability exists in Service Provider Management System version 1.0, which originates from...

5.4CVSS6AI score0.00564EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/04/27 12:00 a.m.•13 views

PT-2023-18992 · Sourcecodester · Sourcecodester Service Provider Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Service Provider Management System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Service Provider Management System, affecting an unknown functionality of the file /classes/Users.php. The...

5.4CVSS4.3AI score0.00564EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2023/04/27 12:00 a.m.•12 views

Service Provider Management System 授权问题漏洞

Service Provider Management System is a web-based application by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. An authorization issue vulnerability exists in Service Provider Management System version 1.0, which can be exploited...

9.8CVSS6.7AI score0.00511EPSS
SaveExploits0References3
Rows per page
Query Builder