16 matches found
EUVD-2024-44566
Malicious code in bioql PyPI...
CVE-2020-14972
Multiple SQL injection vulnerabilities in Sourcecodester Pisay Online E-Learning System 1.0 allow remote unauthenticated attackers to bypass authentication and achieve Remote Code Execution RCE via the useremail, userpass, and id parameters on the admin login-portal and the edit-lessons webpages...
CVE-2024-4349
A vulnerability has been found in SourceCodester Pisay Online E-Learning System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /lesson/controller.php. The manipulation of the argument file leads to unrestricted upload. The attack can be...
Sourcecodester Pisay Online E-Learning System 安全漏洞
Sourcecodester Pisay Online E-Learning System is an online e-learning system based on PHP and MySQL. A security vulnerability exists in SourceCodester Pisay Online E-Learning System v1.0, which stems from an arbitrary file upload vulnerability that allows an attacker to execute arbitrary code by...
CVE-2024-4349
A vulnerability has been found in SourceCodester Pisay Online E-Learning System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /lesson/controller.php. The manipulation of the argument file leads to unrestricted upload. The attack can be...
CVE-2024-4349
CVE-2024-4349 affects SourceCodester Pisay Online E-Learning System 1.0. The vulnerability lies in the /lesson/controller.php file where manipulating the file parameter leads to unrestricted uploads. It can be exploited remotely, and publicly disclosed exploit information exists (VDB-262489). Rem...
CVE-2024-4349 SourceCodester Pisay Online E-Learning System controller.php unrestricted upload
A vulnerability has been found in SourceCodester Pisay Online E-Learning System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /lesson/controller.php. The manipulation of the argument file leads to unrestricted upload. The attack can be...
PT-2024-30592
Name of the Vulnerable Software and Affected Versions SourceCodester Pisay Online E-Learning System version 1.0 Description A critical vulnerability has been found in the SourceCodester Pisay Online E-Learning System, affecting an unknown functionality of the file /lesson/controller.php. The...
CVE-2024-4349: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in SourceCodester Pisay Online E-Learning System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /lesson/controller.php. The manipulation of the argument file leads to unrestricted upload. The attack can be...
Sourcecodester Pisay Online E-Learning System SQL Injection Vulnerability (CNVD-2021-95936)
Sourcecodester Pisay Online E-Learning System is an online e-learning system based on PHP and MySQL. Sourcecodester Pisay Online E-Learning System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in a database-based...
CVE-2020-14972
Multiple SQL injection vulnerabilities in Sourcecodester Pisay Online E-Learning System 1.0 allow remote unauthenticated attackers to bypass authentication and achieve Remote Code Execution RCE via the useremail, userpass, and id parameters on the admin login-portal and the edit-lessons webpages...
Sql injection
Multiple SQL injection vulnerabilities in Sourcecodester Pisay Online E-Learning System 1.0 allow remote unauthenticated attackers to bypass authentication and achieve Remote Code Execution RCE via the useremail, userpass, and id parameters on the admin login-portal and the edit-lessons webpages...
CVE-2020-14972
CVE-2020-14972 affects Sourcecodester Pisay Online E-Learning System 1.0. Connected sources describe multiple SQL injection vulnerabilities in the admin login-portal and the edit-lessons pages that allow remote unauthenticated attackers to bypass authentication and achieve Remote Code Execution (...
CVE-2020-14972
Multiple SQL injection vulnerabilities in Sourcecodester Pisay Online E-Learning System 1.0 allow remote unauthenticated attackers to bypass authentication and achieve Remote Code Execution RCE via the useremail, userpass, and id parameters on the admin login-portal and the edit-lessons webpages...
CVE-2020-14972: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Sourcecodester Pisay Online E-Learning System 1.0 allow remote unauthenticated attackers to bypass authentication and achieve Remote Code Execution RCE via the useremail, userpass, and id parameters on the admin login-portal and the edit-lessons webpages...
PT-2020-14098
Name of the Vulnerable Software and Affected Versions Sourcecodester Pisay Online E-Learning System version 1.0 Description The issue allows remote unauthenticated attackers to bypass authentication and achieve Remote Code Execution RCE via the user email, user pass, and id parameters on the admi...