Lucene search
+L

29 matches found

Vulnrichment
Vulnrichment
•added 2024/04/06 4:00 a.m.•13 views

CVE-2024-3359 SourceCodester Online Library System login.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Library System 1.0. This issue affects some unknown processing of the file admin/login.php. The manipulation of the argument useremail leads to sql injection. The attack may be initiated remotely. The explo...

7.5CVSS7.4AI score0.00963EPSS
SaveExploits1References4
CVE
CVE
•added 2024/04/06 4:00 a.m.•73 views

CVE-2024-3359

CVE-2024-3359 affects SourceCodester Online Library System 1.0. The vulnerability is in the admin/login.php file where the user_email parameter is manipulated, causing a SQL injection due to unsanitized input. Documents indicate the attack is remotely executable and that an exploit has been discl...

9.8CVSS7.5AI score0.00963EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/06 12:00 a.m.•4 views

CVE-2024-3360: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Online Library System 1.0. Affected is an unknown function of the file admin/books/index.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

9.8CVSS5.5AI score0.00943EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/06 12:00 a.m.•3 views

CVE-2024-3364: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Online Library System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file admin/books/index.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The explo...

5.4CVSS3.9AI score0.0055EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/06 12:00 a.m.•6 views

CVE-2024-3359: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Online Library System 1.0. This issue affects some unknown processing of the file admin/login.php. The manipulation of the argument useremail leads to sql injection. The attack may be initiated remotely. The explo...

9.8CVSS5.5AI score0.00963EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/06 12:00 a.m.•3 views

CVE-2024-3365: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Online Library System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file admin/users/controller.php. The manipulation of the argument username leads to cross site scripting. The attack may be initiated remotely...

5.4CVSS3.9AI score0.0055EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/06 12:00 a.m.•3 views

CVE-2024-3362: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Library System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/books/controller.php. The manipulation of the argument IBSN leads to sql injection. The attack may be launched remotely. The...

8.8CVSS5.5AI score0.00829EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/06 12:00 a.m.•3 views

CVE-2024-3363: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Library System 1.0. It has been classified as critical. This affects an unknown part of the file admin/borrowed/index.php. The manipulation of the argument BookPublisher/BookTitle leads to sql injection. It is possible to initiate the attack...

9.8CVSS5.5AI score0.00851EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/06 12:00 a.m.•3 views

CVE-2024-3361: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Online Library System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/books/deweydecimal.php. The manipulation of the argument category leads to sql injection. The attack can be launched...

8.8CVSS5.5AI score0.00829EPSS
SaveExploits1References2
Rows per page
Query Builder