Lucene search
+L

17693 matches found

Cvelist
Cvelist
•added 2024/09/28 9:00 a.m.•49 views

CVE-2024-9296 SourceCodester Advocate Office Management System forgot_pass.php sql injection

A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /control/forgotpass.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotel...

7.5CVSS0.00646EPSS
SaveExploits1References5
CVE
CVE
•added 2024/09/28 9:00 a.m.•64 views

CVE-2024-9296

SourceCodester Advocate Office Management System 1.0 is affected by a SQL injection in the forgot_pass.php handler, triggered by manipulating the username parameter. The vulnerability is exploitable remotely and has been publicly disclosed. The affected file is /control/forgot_pass.php; no concre...

9.8CVSS7.7AI score0.00646EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/28 9:00 a.m.•48 views

CVE-2024-9296 SourceCodester Advocate Office Management System forgot_pass.php sql injection

A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /control/forgotpass.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotel...

7.5CVSS7.4AI score0.00646EPSS
SaveExploits1References5
OSV
OSV
•added 2024/09/28 7:15 a.m.•15 views

CVE-2024-9295

A vulnerability was found in SourceCodester Advocate Office Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /control/login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The...

9.8CVSS5.8AI score0.00646EPSS
SaveExploits1References5
NVD
NVD
•added 2024/09/28 7:15 a.m.•34 views

CVE-2024-9295

A vulnerability was found in SourceCodester Advocate Office Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /control/login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The...

9.8CVSS0.00646EPSS
SaveExploits1References5
CVE
CVE
•added 2024/09/28 7:00 a.m.•77 views

CVE-2024-9295

CVE-2024-9295 affects SourceCodester Advocate Office Management System 1.0. The vulnerability is an SQL injection in the login flow, caused by unsafely processing the username parameter in /control/login.php. It can be exploited remotely and has been publicly disclosed. Multiple sources corrobora...

9.8CVSS7.7AI score0.00646EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2024/09/28 7:00 a.m.•47 views

CVE-2024-9295 SourceCodester Advocate Office Management System login.php sql injection

A vulnerability was found in SourceCodester Advocate Office Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /control/login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The...

7.5CVSS0.00646EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/09/28 7:00 a.m.•21 views

CVE-2024-9295 SourceCodester Advocate Office Management System login.php sql injection

A vulnerability was found in SourceCodester Advocate Office Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /control/login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The...

7.5CVSS7.4AI score0.00646EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/09/28 12:00 a.m.•17 views

PT-2024-39564 · Sourcecodester · Sourcecodester Employee/Visitor Gate Pass Logging System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description: A critical issue affects the processing of the file /admin/maintenance/manage department.php, where the manipulation of the id argument leads to SQL...

8.8CVSS7.1AI score0.00532EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2024/09/28 12:00 a.m.•15 views

SourceCodester Kortex Lite Advocate Office Management System 安全漏洞

SourceCodester Kortex Lite Advocate Office Management System is an office management system from SourceCodester, Inc. A security vulnerability exists in SourceCodester Kortex Lite Advocate Office Management System version 1.0, which originates from an SQL injection issue contained in the username...

9.8CVSS8AI score0.00646EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2024/09/28 12:00 a.m.•10 views

Employee and Visitor Gate Pass Logging System SQL注入漏洞

Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in SourceCodester Employee and Visitor Gate Pass Logging System version 1.0, which stems from an SQL injection in the id...

8.8CVSS7.1AI score0.00532EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2024/09/28 12:00 a.m.•12 views

PT-2024-39552 · Sourcecodester · Sourcecodester Online Railway Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Railway Reservation System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/. The manipulation of the page argument with the input...

6.5CVSS6.3AI score0.00444EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2024/09/28 12:00 a.m.•15 views

PT-2024-39553 · Sourcecodester · Sourcecodester Online Railway Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Railway Reservation System version 1.0 Description: A vulnerability was found in the Ticket Handler component, specifically affecting some unknown functionality of the file /?page=tickets. The manipulation of the id...

5.3CVSS7.2AI score0.00491EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2024/09/28 12:00 a.m.•13 views

PT-2024-39555 · Sourcecodester · Sourcecodester Online Railway Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Railway Reservation System version 1.0 Description: A problematic issue was found in the Message Us Form component, specifically in the contact us.php file. The manipulation of the fullname, email, or message arguments...

6.9CVSS4.3AI score0.00617EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2024/09/28 12:00 a.m.•11 views

Online Railway Reservation System 授权问题漏洞

Online Railway Reservation System is an online railroad reservation system by adminastro individual developers. An authorization issue vulnerability exists in SourceCodester Online Railway Reservation System version 1.0, which stems from the page with the input trains/schedules/systeminfo paramet...

6.5CVSS6.6AI score0.00444EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2024/09/28 12:00 a.m.•10 views

SourceCodester Online Timesheet App SQL注入漏洞

SourceCodester Online Timesheet App is a web application from SourceCodester built with PHP and MySQL designed to simplify time management and task tracking. A SQL injection vulnerability exists in the SourceCodester Online Timesheet App version 1.0, which stems from an SQL injection issue...

8.8CVSS7AI score0.00532EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/09/28 12:00 a.m.•16 views

Online Railway Reservation System 跨站脚本漏洞

Online Railway Reservation System is an online railroad reservation system by adminastro individual developers. A cross-site scripting vulnerability exists in SourceCodester Online Railway Reservation System version 1.0, which stems from a cross-site scripting issue with the First Name/Middle...

5.4CVSS4.5AI score0.00479EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2024/09/28 12:00 a.m.•11 views

Online Eyewear Shop SQL注入漏洞

Online Eyewear Shop is an online eyewear store by the individual developer Carlo Montero. A SQL injection vulnerability exists in SourceCodester Online Eyewear Shop version 1.0, which originates from an SQL injection issue contained in the id parameter in the /classes/Master.php?f=deletecategory...

8.8CVSS7AI score0.00532EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2024/09/28 12:00 a.m.•14 views

PT-2024-39568 · Unknown · Sourcecodester Online Timesheet App

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Timesheet App version 1.0 Description: A critical vulnerability was found in the SourceCodester Online Timesheet App, affecting an unknown part of the file /endpoint/delete-timesheet.php. The manipulation of the timeshee...

8.8CVSS7.4AI score0.00532EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2024/09/28 12:00 a.m.•14 views

SourceCodester Online Timesheet App 跨站脚本漏洞

SourceCodester Online Timesheet App is a SourceCodester open source web application built with PHP and MySQL designed to simplify time management and task tracking. A cross-site scripting vulnerability exists in version 1.0 of the SourceCodester Online Timesheet App, which stems from a cross-site...

5.4CVSS4.5AI score0.00438EPSS
SaveExploits1References2
Rows per page
Query Builder