Lucene search
+L

103 matches found

Vulnrichment
Vulnrichment
added 2023/09/29 6:31 p.m.16 views

CVE-2023-5281 SourceCodester Engineers Online Portal remove_inbox_message.php sql injection

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as critical. This affects an unknown part of the file removeinboxmessage.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

6.5CVSS7.2AI score0.0069EPSS
Exploits1References3
OSV
OSV
added 2023/09/29 6:15 p.m.4 views

CVE-2023-5278

A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...

9.8CVSS5.7AI score0.00732EPSS
Exploits1References3
NVD
NVD
added 2023/09/29 6:15 p.m.22 views

CVE-2023-5279

A vulnerability has been found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file myclassmates.php. The manipulation of the argument teacherclassstudentid leads to sql injection. The attack can be launch...

9.8CVSS7.4AI score0.00684EPSS
Exploits1References3
NVD
NVD
added 2023/09/29 6:15 p.m.19 views

CVE-2023-5278

A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...

9.8CVSS7.4AI score0.00732EPSS
Exploits1References3
NVD
NVD
added 2023/09/29 6:15 p.m.18 views

CVE-2023-5277

A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...

9.8CVSS7.2AI score0.00822EPSS
Exploits1References3
OSV
OSV
added 2023/09/29 6:15 p.m.4 views

CVE-2023-5277

A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...

9.8CVSS5.4AI score0.00822EPSS
Exploits1References3
Prion
Prion
added 2023/09/29 6:15 p.m.18 views

Out-of-bounds

A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...

6.5CVSS9.5AI score0.00822EPSS
Exploits1References3Affected Software1
Prion
Prion
added 2023/09/29 6:15 p.m.24 views

Sql injection

A vulnerability has been found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file myclassmates.php. The manipulation of the argument teacherclassstudentid leads to sql injection. The attack can be launch...

6.5CVSS9.7AI score0.00684EPSS
Exploits1References3Affected Software1
Prion
Prion
added 2023/09/29 6:15 p.m.23 views

Sql injection

A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file mystudents.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee...

6.5CVSS9.6AI score0.00684EPSS
Exploits1References3Affected Software1
Prion
Prion
added 2023/09/29 6:15 p.m.20 views

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...

6.5CVSS9.7AI score0.00732EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/29 6:0 p.m.14 views

CVE-2023-5280 SourceCodester Engineers Online Portal my_students.php sql injection

A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file mystudents.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee...

6.5CVSS7.4AI score0.00684EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/09/29 6:0 p.m.12 views

CVE-2023-5279 SourceCodester Engineers Online Portal my_classmates.php sql injection

A vulnerability has been found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file myclassmates.php. The manipulation of the argument teacherclassstudentid leads to sql injection. The attack can be launch...

6.5CVSS7.4AI score0.00684EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/09/29 5:31 p.m.14 views

CVE-2023-5278 SourceCodester Engineers Online Portal login.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...

6.5CVSS7.3AI score0.00732EPSS
Exploits1References3
CVE
CVE
added 2023/09/29 5:31 p.m.127 views

CVE-2023-5278

CVE-2023-5278 affects SourceCodester Engineers Online Portal 1.0, specifically the login.php file. The vulnerability is a SQL injection in the handling of the username/password parameters, enabling remote exploitation. Documents indicate exploitation has been disclosed publicly and that the impac...

9.8CVSS7.4AI score0.00732EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/09/29 5:31 p.m.24 views

CVE-2023-5277 SourceCodester Engineers Online Portal student_avatar.php unrestricted upload

A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...

6.5CVSS9.8AI score0.00822EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/09/29 5:31 p.m.3 views

CVE-2023-5277 SourceCodester Engineers Online Portal student_avatar.php unrestricted upload

A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...

6.5CVSS8.1AI score0.00822EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/09/29 5:0 p.m.13 views

CVE-2023-5276 SourceCodester Engineers Online Portal downloadable_student.php sql injection

A vulnerability classified as critical was found in SourceCodester Engineers Online Portal 1.0. This vulnerability affects unknown code of the file downloadablestudent.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The identifier of this...

6.5CVSS7.6AI score0.00684EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/09/29 12:0 a.m.6 views

PT-2023-32002 · Unknown +1 · Sourcecodester Engineers Online Portal +1

Name of the Vulnerable Software and Affected Versions: SourceCodester Engineers Online Portal version 1.0 Description: A critical issue has been found in the file remove inbox message.php, where the manipulation of the id argument leads to SQL injection. This can be initiated remotely. The issue...

9.8CVSS7.2AI score0.0069EPSS
Exploits1References7
CNVD
CNVD
added 2021/11/08 12:0 a.m.47 views

Sourcecodester Engineers Online Portal SQL Injection Vulnerability (CNVD-2021-99654)

Sourcecodester Engineers Online Portal is an open source online portal. sourcecodester Engineers Online Portal in PHP is vulnerable to SQL injection. An attacker can exploit the vulnerability to extract sensitive data from the web server via the id parameter of quizquestion.php and, in some cases...

8.8CVSS5.5AI score0.04414EPSS
Exploits3References1
CNVD
CNVD
added 2021/11/08 12:0 a.m.34 views

Sourcecodester Engineers Online Portal SQL Injection Vulnerability (CNVD-2021-99650)

Sourcecodester Engineers Online Portal is an open source online portal. Sourcecodester Engineers Online Portal in PHP is vulnerable to SQL injection, which can be exploited by attackers to extract sensitive data from the web server via the announcesstudent.php id parameter of announcesstudent.php...

9.8CVSS4.6AI score0.08285EPSS
Exploits3References1
Rows per page
Query Builder