Lucene search
+L

1255 matches found

Vulnrichment
Vulnrichment
•added 2023/04/18 12:00 a.m.•0 views

CVE-2023-27043

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is...

5.6AI score0.02527EPSS
SaveExploits1References23
OSV
OSV
•added 2023/04/18 12:00 a.m.•24 views

CVE-2023-27043

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is...

5.3CVSS5.5AI score
SaveExploits0References48
AlpineLinux
AlpineLinux
•added 2023/04/18 12:00 a.m.•23 views

CVE-2023-27043

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is...

5.3CVSS7.1AI score0.02527EPSS
SaveExploits1
OSV
OSV
•added 2023/04/14 7:15 a.m.•16 views

CVE-2023-2035

A vulnerability has been found in Campcodes Video Sharing Website 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file signup.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has bee...

7.5CVSS6.5AI score0.00656EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/04/14 12:00 a.m.•25 views

Video Sharing Website SQL注入漏洞

Video Sharing Website is a video sharing website. A SQL injection vulnerability exists in Campcodes Video Sharing Website version 1.0, which stems from a problem in the file signup.php, where manipulation of the parameter id can lead to sql injection...

7.5CVSS6.9AI score0.00656EPSS
SaveExploits1References4
OSV
OSV
•added 2023/03/09 9:15 p.m.•14 views

CVE-2023-27212

A cross-site scripting XSS vulnerability in /php-opos/signup.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter...

6.1CVSS5.9AI score0.00476EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/03/09 12:00 a.m.•15 views

PT-2023-21010 · Unknown · Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Online Pizza Ordering System version 1.0 Description: A cross-site scripting XSS issue in the /php-opos/signup.php endpoint of the Online Pizza Ordering System allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

6.1CVSS6AI score0.00476EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2023/03/09 12:00 a.m.•16 views

Online Pizza Ordering System 跨站脚本漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, a personal developer. A security vulnerability exists in Online Pizza Ordering System version 1.0, which originates from a cross-site scripting XSS vulnerability in /php-opos/signup.php, which can be exploited by an...

6.1CVSS6.3AI score0.00476EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2023/03/06 12:00 a.m.•18 views

The vulnerability of the signup.php script in the Dental Clinic Appointment Reservation System allows attackers to perform cross-site scripting attacks.

The vulnerability in the signup.php script of the Dental Clinic Appointment Reservation System relates to insufficient protection of the website’s structure when processing the firstname parameter. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks remotely...

5CVSS5.2AI score0.00784EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/02/26 12:15 p.m.•12 views

CVE-2023-1036

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /APR/signup.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross...

6.1CVSS3.9AI score0.00784EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/02/26 12:00 a.m.•13 views

PT-2023-1563 · Sourcecodester · Dental Clinic Appointment Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Dental Clinic Appointment Reservation System version 1.0 Description: A vulnerability was found in the Dental Clinic Appointment Reservation System, affecting the file /APR/signup.php, specifically the POST Parameter Handler...

6.1CVSS4.6AI score0.00784EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2023/02/08 12:00 a.m.•15 views

Signup Form Detected

This is an informational notice that the scanner identified a potential signup form. No source data...

7.3AI score
SaveExploits0
OSV
OSV
•added 2023/02/06 3:15 p.m.•14 views

CVE-2023-24191

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...

6.1CVSS6.3AI score0.00486EPSS
SaveExploits1References2
NVD
NVD
•added 2023/02/06 3:15 p.m.•31 views

CVE-2023-24191

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...

6.1CVSS6AI score0.00486EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/02/06 12:00 a.m.•16 views

Online Food Ordering System 跨站脚本漏洞

A cross-site scripting vulnerability exists in Online Food Ordering System, an online food ordering system. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the redirect parameter of the signup.php page, which can be exploited by attackers to caus...

6.1CVSS6.2AI score0.00486EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/02/06 12:00 a.m.•18 views

PT-2023-19467 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version v2 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is present in the redirect parameter in the signup.php file. Recommendations: For Online Food Ordering...

6.1CVSS5.8AI score0.00486EPSS
SaveExploits1References5
The Hacker News
The Hacker News
•added 2023/02/03 7:55 a.m.•6 views

Atlassian's Jira Service Management Found Vulnerable to Critical Vulnerability

Atlassian has released fixes to resolve a critical security flaw in Jira Service Management Server and Data Center that could be abused by an attacker to pass off as another user and gain unauthorized access to susceptible instances. The vulnerability is tracked as CVE-2023-22501 CVSS score: 9.4...

9.8CVSS9.8AI score0.98076EPSS
SaveExploits3
NCSC
NCSC
•added 2023/02/02 12:00 a.m.•11 views

Vulnerability fixed in Atlassian Jira

Atlassian has fixed a vulnerability in Jira Service Management Server and Data Center. The vulnerability allows a malicious party able to obtain a user's signup token and thus obtain a user's signup token and thereby bypass authentication. To obtain a signup token, a malicious party must gain...

9.4CVSS6.9AI score0.15533EPSS
SaveExploits0
OSV
OSV
•added 2023/02/01 7:15 p.m.•13 views

CVE-2023-22501

An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacker to impersonate another user and gain access to a Jira Service Management instance under certain circumstances. With write access to a User Directory and outgoing email enabled...

9.1CVSS7.5AI score0.15533EPSS
SaveExploits0References1
NVD
NVD
•added 2023/02/01 7:15 p.m.•43 views

CVE-2023-22501

An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacker to impersonate another user and gain access to a Jira Service Management instance under certain circumstances. With write access to a User Directory and outgoing email enabled...

9.4CVSS9.5AI score0.15533EPSS
SaveExploits0References1
Rows per page
Query Builder