Lucene search
+L

19111 matches found

Positive Technologies
Positive Technologies
•added 2024/08/27 12:00 a.m.•14 views

PT-2024-38876 · Sourcecodester · Sourcecodester E-Commerce Website

Name of the Vulnerable Software and Affected Versions: SourceCodester E-Commerce Website version 1.0 Description: A critical issue has been identified in the /Admin/registration.php file, where the manipulation of the fname argument leads to SQL injection. This issue can be initiated remotely. Th...

9.8CVSS7.7AI score0.00739EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/27 12:00 a.m.•3 views

CVE-2024-8223: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. This vulnerability affects unknown code of the file /classes/Master.php?f=deletecategory. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has be...

9.8CVSS6.4AI score0.0059EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/27 12:00 a.m.•2 views

CVE-2024-8221: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

9.8CVSS6.4AI score0.0059EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/27 12:00 a.m.•1 views

CVE-2024-8217: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester E-Commerce Website 1.0 and classified as critical. This vulnerability affects unknown code of the file /Admin/registration.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has bee...

9.8CVSS7AI score0.00739EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/27 12:00 a.m.•0 views

CVE-2024-8222: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Music Gallery Site 1.0. This affects an unknown part of the file /admin/?page=musics/managemusic. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

9.8CVSS6.5AI score0.0059EPSS
SaveExploits1References1
OSV
OSV
•added 2024/08/26 4:15 p.m.•15 views

CVE-2024-8172

A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Attendance System 1.0. This issue affects some unknown processing of the file /endpoint/delete-student.php. The manipulation of the argument student/attendance leads to cross site scripting. The attack...

6.1CVSS3.9AI score0.00445EPSS
SaveExploits1References6
NVD
NVD
•added 2024/08/26 4:15 p.m.•38 views

CVE-2024-8170

A vulnerability classified as problematic has been found in SourceCodester Zipped Folder Manager App 1.0. This affects an unknown part of the file /endpoint/add-folder.php. The manipulation of the argument folder leads to unrestricted upload. It is possible to initiate the attack remotely. The...

9.8CVSS0.00768EPSS
SaveExploits1References5
NVD
NVD
•added 2024/08/26 4:15 p.m.•51 views

CVE-2024-8172

A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Attendance System 1.0. This issue affects some unknown processing of the file /endpoint/delete-student.php. The manipulation of the argument student/attendance leads to cross site scripting. The attack...

6.1CVSS0.00445EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2024/08/26 4:00 p.m.•51 views

CVE-2024-8172 SourceCodester QR Code Attendance System delete-student.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Attendance System 1.0. This issue affects some unknown processing of the file /endpoint/delete-student.php. The manipulation of the argument student/attendance leads to cross site scripting. The attack...

5.3CVSS0.00445EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2024/08/26 4:00 p.m.•18 views

CVE-2024-8172 SourceCodester QR Code Attendance System delete-student.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Attendance System 1.0. This issue affects some unknown processing of the file /endpoint/delete-student.php. The manipulation of the argument student/attendance leads to cross site scripting. The attack...

5.3CVSS6.6AI score0.00445EPSS
SaveExploits1References6
CVE
CVE
•added 2024/08/26 4:00 p.m.•64 views

CVE-2024-8172

SourceCodester QR Code Attendance System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the endpoint /endpoint/delete-student.php, triggered by manipulating the student/attendance parameter. The issue arises from handling user input and may be exploitable remotely; public exploi...

6.1CVSS6.4AI score0.00445EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2024/08/26 3:31 p.m.•51 views

CVE-2024-8170 SourceCodester Zipped Folder Manager App add-folder.php unrestricted upload

A vulnerability classified as problematic has been found in SourceCodester Zipped Folder Manager App 1.0. This affects an unknown part of the file /endpoint/add-folder.php. The manipulation of the argument folder leads to unrestricted upload. It is possible to initiate the attack remotely. The...

5.3CVSS0.00768EPSS
SaveExploits1References5
CVE
CVE
•added 2024/08/26 3:31 p.m.•60 views

CVE-2024-8170

CVE-2024-8170 affects the SourceCodester Zipped Folder Manager App 1.0. The vulnerability is in an unknown part of /endpoint/add-folder.php where manipulation of the folder argument enables unrestricted file uploads, allowing remote initiation. Public exploit information exists. Concrete details ...

9.8CVSS4.1AI score0.00768EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/08/26 3:31 p.m.•17 views

CVE-2024-8170 SourceCodester Zipped Folder Manager App add-folder.php unrestricted upload

A vulnerability classified as problematic has been found in SourceCodester Zipped Folder Manager App 1.0. This affects an unknown part of the file /endpoint/add-folder.php. The manipulation of the argument folder leads to unrestricted upload. It is possible to initiate the attack remotely. The...

5.3CVSS6.9AI score0.00768EPSS
SaveExploits1References5
Packet Storm
Packet Storm
•added 2024/08/26 12:00 a.m.•241 views

Human Resource Management System 2024 1.0 Cross Site Scripting

============================================================================================================================================= | Title : Human Resource Management System 2024 v1.0 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...

7.4AI score
SaveExploits0
CNNVD
CNNVD
•added 2024/08/26 12:00 a.m.•13 views

SourceCodester Zipped Folder Manager App 代码问题漏洞

SourceCodester Zipped Folder Manager App is an open source zipped folder manager application from SourceCodester. A code issue vulnerability exists in version 1.0 of the SourceCodester Zipped Folder Manager App that stems from improper handling of the parameter folder, resulting in unrestricted...

9.8CVSS5.1AI score0.00768EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/26 12:00 a.m.•0 views

CVE-2024-8172: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Attendance System 1.0. This issue affects some unknown processing of the file /endpoint/delete-student.php. The manipulation of the argument student/attendance leads to cross site scripting. The attack...

6.1CVSS3.6AI score0.00445EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/26 12:00 a.m.•0 views

CVE-2024-8170: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as problematic has been found in SourceCodester Zipped Folder Manager App 1.0. This affects an unknown part of the file /endpoint/add-folder.php. The manipulation of the argument folder leads to unrestricted upload. It is possible to initiate the attack remotely. The...

9.8CVSS5.1AI score0.00768EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/08/26 12:00 a.m.•13 views

PT-2024-38857 · Sourcecodester · Sourcecodester Qr Code Attendance System

Name of the Vulnerable Software and Affected Versions: SourceCodester QR Code Attendance System version 1.0 Description: A problematic issue has been found in the system, affecting the processing of the file /endpoint/delete-student.php. The manipulation of the argument student/attendance leads t...

6.1CVSS4.4AI score0.00445EPSS
SaveExploits1References10
OSV
OSV
•added 2024/08/25 11:15 p.m.•15 views

CVE-2024-8152

A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /endpoint/add-bookmark.php of the component Parameter Handler. The manipulation of the argument name/url leads to cross site scripting...

5.4CVSS3.7AI score0.00402EPSS
SaveExploits1References5
Rows per page
Query Builder