Lucene search
+L

35 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/18 12:00 a.m.•0 views

CVE-2024-2571: Execution After Redirect (EAR)

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manage-admin.php. The manipulation leads to execution after redirect. The attack can be initiated remotely. The exploit has been...

9.8CVSS5.4AI score0.0103EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/18 12:00 a.m.•0 views

CVE-2024-2577: Authorization Bypass Through User-Controlled Key

A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /update-employee.php. The manipulation of the argument adminid leads to authorization bypass. The attack can be initiated remotely...

9.8CVSS5.3AI score0.00669EPSS
SaveExploits0References2
NVD
NVD
•added 2024/03/17 8:15 a.m.•26 views

CVE-2024-2556

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file attendance-info.php. The manipulation of the argument userid leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS6.8AI score0.00626EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/03/17 8:00 a.m.•15 views

CVE-2024-2556 SourceCodester Employee Task Management System attendance-info.php sql injection

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file attendance-info.php. The manipulation of the argument userid leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS6.8AI score0.00626EPSS
SaveExploits1References3
NVD
NVD
•added 2024/03/17 7:15 a.m.•38 views

CVE-2024-2555

A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file update-admin.php. The manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The...

7.2CVSS6.8AI score0.00608EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/03/17 6:31 a.m.•23 views

CVE-2024-2555 SourceCodester Employee Task Management System update-admin.php sql injection

A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file update-admin.php. The manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The...

6.5CVSS7.3AI score0.00608EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/17 12:00 a.m.•0 views

CVE-2024-2555: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file update-admin.php. The manipulation of the argument adminid leads to sql injection. The attack may be launched remotely. The...

7.2CVSS5.5AI score0.00608EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/17 12:00 a.m.•1 views

CVE-2024-2569: Execution After Redirect (EAR)

A vulnerability was found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin-manage-user.php. The manipulation leads to execution after redirect. The attack may be launched remotely. The exploit...

9.8CVSS5.4AI score0.01179EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/17 12:00 a.m.•0 views

CVE-2024-2554: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file update-employee.php. The manipulation of the argument adminid leads to sql injection. The attack can be launched...

8.8CVSS5.5AI score0.00695EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/17 12:00 a.m.•1 views

CVE-2024-2556: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file attendance-info.php. The manipulation of the argument userid leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS5.5AI score0.00626EPSS
SaveExploits1References2
NVD
NVD
•added 2023/02/18 8:15 a.m.•48 views

CVE-2023-0905

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has...

7.5CVSS7.4AI score0.03189EPSS
SaveExploits5References3
NVD
NVD
•added 2023/02/18 8:15 a.m.•38 views

CVE-2023-0904

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file task-details.php. The manipulation of the argument taskid leads to sql injection. The attack may be initiated remotely. The exploi...

8.8CVSS7.2AI score0.01684EPSS
SaveExploits5References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/18 12:00 a.m.•0 views

CVE-2023-0903: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file edit-task.php. The manipulation of the argument taskid leads to sql injection. The attack can be initiated remotely. The complexit...

8.8CVSS5.2AI score0.0073EPSS
SaveExploits5References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/18 12:00 a.m.•0 views

CVE-2023-0904: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file task-details.php. The manipulation of the argument taskid leads to sql injection. The attack may be initiated remotely. The exploi...

8.8CVSS5.5AI score0.01684EPSS
SaveExploits5References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/18 12:00 a.m.•0 views

CVE-2023-0905: Improper Authentication

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has...

7.5CVSS5.3AI score0.03189EPSS
SaveExploits5References2
Rows per page
Query Builder