103 matches found
CVE-2023-5281 SourceCodester Engineers Online Portal remove_inbox_message.php sql injection
A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as critical. This affects an unknown part of the file removeinboxmessage.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has...
CVE-2023-5278
A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...
CVE-2023-5279
A vulnerability has been found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file myclassmates.php. The manipulation of the argument teacherclassstudentid leads to sql injection. The attack can be launch...
CVE-2023-5278
A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...
CVE-2023-5277
A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...
CVE-2023-5277
A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...
Out-of-bounds
A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...
Sql injection
A vulnerability has been found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file myclassmates.php. The manipulation of the argument teacherclassstudentid leads to sql injection. The attack can be launch...
Sql injection
A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file mystudents.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee...
Sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...
CVE-2023-5280 SourceCodester Engineers Online Portal my_students.php sql injection
A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file mystudents.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee...
CVE-2023-5279 SourceCodester Engineers Online Portal my_classmates.php sql injection
A vulnerability has been found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file myclassmates.php. The manipulation of the argument teacherclassstudentid leads to sql injection. The attack can be launch...
CVE-2023-5278 SourceCodester Engineers Online Portal login.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...
CVE-2023-5278
CVE-2023-5278 affects SourceCodester Engineers Online Portal 1.0, specifically the login.php file. The vulnerability is a SQL injection in the handling of the username/password parameters, enabling remote exploitation. Documents indicate exploitation has been disclosed publicly and that the impac...
CVE-2023-5277 SourceCodester Engineers Online Portal student_avatar.php unrestricted upload
A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...
CVE-2023-5277 SourceCodester Engineers Online Portal student_avatar.php unrestricted upload
A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...
CVE-2023-5276 SourceCodester Engineers Online Portal downloadable_student.php sql injection
A vulnerability classified as critical was found in SourceCodester Engineers Online Portal 1.0. This vulnerability affects unknown code of the file downloadablestudent.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The identifier of this...
PT-2023-32002 · Unknown +1 · Sourcecodester Engineers Online Portal +1
Name of the Vulnerable Software and Affected Versions: SourceCodester Engineers Online Portal version 1.0 Description: A critical issue has been found in the file remove inbox message.php, where the manipulation of the id argument leads to SQL injection. This can be initiated remotely. The issue...
Sourcecodester Engineers Online Portal SQL Injection Vulnerability (CNVD-2021-99654)
Sourcecodester Engineers Online Portal is an open source online portal. sourcecodester Engineers Online Portal in PHP is vulnerable to SQL injection. An attacker can exploit the vulnerability to extract sensitive data from the web server via the id parameter of quizquestion.php and, in some cases...
Sourcecodester Engineers Online Portal SQL Injection Vulnerability (CNVD-2021-99650)
Sourcecodester Engineers Online Portal is an open source online portal. Sourcecodester Engineers Online Portal in PHP is vulnerable to SQL injection, which can be exploited by attackers to extract sensitive data from the web server via the announcesstudent.php id parameter of announcesstudent.php...