Lucene search
+L

12 matches found

NVD
NVD
•added 2024/02/29 1:43 a.m.•31 views

CVE-2024-1970

A vulnerability, which was classified as problematic, was found in SourceCodester Online Learning System V2 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...

6.1CVSS4.4AI score0.00714EPSS
SaveExploits1References3
Prion
Prion
•added 2024/02/29 1:43 a.m.•30 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Online Learning System V2 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...

5CVSS6.7AI score0.00714EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/02/28 8:31 p.m.•22 views

CVE-2024-1970 SourceCodester Online Learning System V2 index.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Online Learning System V2 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...

5CVSS6.4AI score0.00714EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/02/28 8:31 p.m.•48 views

CVE-2024-1970 SourceCodester Online Learning System V2 index.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Online Learning System V2 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...

5CVSS4.7AI score0.00714EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/28 12:00 a.m.•5 views

CVE-2024-1970: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Online Learning System V2 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...

6.1CVSS4AI score0.00714EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/02/28 12:00 a.m.•18 views

PT-2024-18460 · Unknown · Sourcecodester Online Learning System V2

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Learning System V2 version 1.0 Description: A problematic issue was found in the software, affecting an unknown function of the file /index.php. The manipulation of the page argument leads to cross-site scripting. It is...

6.1CVSS6.6AI score0.00714EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2022/01/24 3:15 p.m.•9 views

CVE-2021-40596

SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to execute arbitrary SQL commands via the facultyid parameter...

9.8CVSS7.6AI score0.01254EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/24 12:00 a.m.•6 views

CVE-2021-40596: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to execute arbitrary SQL commands via the facultyid parameter...

9.8CVSS6.3AI score0.01254EPSS
SaveExploits1References2
NVD
NVD
•added 2021/11/15 4:15 p.m.•22 views

CVE-2021-42580

Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file /admin/login.php and authenticated file upload in Master.php file , we can craft these two vunlerablities to get unauthenticated remote command execution...

9.8CVSS0.09985EPSS
SaveExploits4References5
Cvelist
Cvelist
•added 2021/11/15 3:57 p.m.•36 views

CVE-2021-42580

Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file /admin/login.php and authenticated file upload in Master.php file , we can craft these two vunlerablities to get unauthenticated remote command execution...

10AI score0.09985EPSS
SaveExploits4References5
CNNVD
CNNVD
•added 2021/11/15 12:00 a.m.•16 views

Sourcecodester Pisay Online E-Learning System SQL注入漏洞

Sourcecodester Online Learning System is an online e-learning system based on PHP and MySQL. sourcecodester Online Learning System has a SQL injection vulnerability in v2.0, which stems from the application's lack of validation of external input SQL statements. An attacker can use this...

9.8CVSS6.2AI score0.09985EPSS
SaveExploits4References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/15 12:00 a.m.•2 views

CVE-2021-42580: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file /admin/login.php and authenticated file upload in Master.php file , we can craft these two vunlerablities to get unauthenticated remote command execution...

9.8CVSS5.9AI score0.09985EPSS
SaveExploits4References2
Rows per page
Query Builder