Lucene search
+L

19426 matches found

CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•13 views

SourceCodester Phone Contact Manager System 安全漏洞

SourceCodester Phone Contact Manager System is an open source phone contact management system from SourceCodester. A security vulnerability exists in SourceCodester Phone Contact Manager System version 1.0, which originates from an incorrect input validation issue in the name parameter of the...

7.8CVSS4.6AI score0.00303EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•1 views

CVE-2024-12354: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, was found in SourceCodester Phone Contact Manager System 1.0. Affected is the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation leads to buffer overflow. It is possible to launch the attack on the local host. T...

7.8CVSS5.7AI score0.0036EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•0 views

CVE-2024-12357: External Control of File Name or Path

A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The...

6.9CVSS5.3AI score0.00436EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•2 views

CVE-2024-12355: Improper Input Validation

A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affected by this vulnerability is the function ContactBook::adding of the file ContactBook.cpp. The manipulation leads to improper input validation. The attack needs to be approached...

7.8CVSS5AI score0.0031EPSS
SaveExploits1References1
NVD
NVD
•added 2024/11/27 5:15 p.m.•23 views

CVE-2024-11860

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=deletetenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization...

6.9CVSS0.00863EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2024/11/27 4:31 p.m.•20 views

CVE-2024-11860 SourceCodester Best House Rental Management System POST Request ajax.php improper authorization

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=deletetenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization...

6.9CVSS7AI score0.00863EPSS
SaveExploits1References6
CVE
CVE
•added 2024/11/27 4:31 p.m.•83 views

CVE-2024-11860

CVE-2024-11860 affects SourceCodester Best House Rental Management System 1.0. The vulnerability exists in the POST Request Handler, specifically the file path /rental/ajax.php?action=delete_tenant, where manipulation of the argument id leads to improper authorization. This can be exploited remot...

6.9CVSS7.3AI score0.00863EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2024/11/27 4:31 p.m.•43 views

CVE-2024-11860 SourceCodester Best House Rental Management System POST Request ajax.php improper authorization

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=deletetenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization...

6.9CVSS0.00863EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/27 12:00 a.m.•1 views

CVE-2024-11860: Improper Authorization

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=deletetenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization...

6.9CVSS6.2AI score0.00863EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/11/27 12:00 a.m.•10 views

SourceCodester Best House Rental Management System 安全漏洞

SourceCodester Best House Rental Management System is a SourceCodester open source house rental management system. A security vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which stems from an improper authorization contained in the id parameter of the POS...

6.9CVSS6.7AI score0.00863EPSS
SaveExploits1References1
NVD
NVD
•added 2024/11/26 8:15 p.m.•29 views

CVE-2024-11743

A vulnerability, which was classified as problematic, was found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file /rental/ajax.php?action=deleteuser of the component POST Request Handler. The manipulation leads to cross-site request forgery. It...

6.9CVSS0.0034EPSS
SaveExploits1References5
OSV
OSV
•added 2024/11/26 8:15 p.m.•12 views

CVE-2024-11743

A vulnerability, which was classified as problematic, was found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file /rental/ajax.php?action=deleteuser of the component POST Request Handler. The manipulation leads to cross-site request forgery. It...

4.3CVSS5.1AI score0.0034EPSS
SaveExploits1References5
NVD
NVD
•added 2024/11/26 8:15 p.m.•22 views

CVE-2024-11742

A vulnerability, which was classified as problematic, has been found in SourceCodester Best House Rental Management System 1.0. This issue affects some unknown processing of the file /rental/ajax.php?action=savetenant. The manipulation of the argument lastname/firstname/middlename leads to cross...

5.4CVSS0.0053EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/11/26 8:00 p.m.•14 views

CVE-2024-11743 SourceCodester Best House Rental Management System POST Request ajax.php cross-site request forgery

A vulnerability, which was classified as problematic, was found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file /rental/ajax.php?action=deleteuser of the component POST Request Handler. The manipulation leads to cross-site request forgery. It...

6.9CVSS7.1AI score0.0034EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/11/26 8:00 p.m.•41 views

CVE-2024-11743 SourceCodester Best House Rental Management System POST Request ajax.php cross-site request forgery

A vulnerability, which was classified as problematic, was found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file /rental/ajax.php?action=deleteuser of the component POST Request Handler. The manipulation leads to cross-site request forgery. It...

6.9CVSS0.0034EPSS
SaveExploits1References5
CVE
CVE
•added 2024/11/26 8:00 p.m.•68 views

CVE-2024-11743

CVE-2024-11743 affects SourceCodester Best House Rental Management System 1.0. The vulnerability lies in the POST Request Handler function for the endpoint /rental/ajax.php?action=delete_user, enabling cross-site request forgery. Exploitation is described remotely, with user interaction often req...

6.9CVSS6.8AI score0.0034EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2024/11/26 8:00 p.m.•68 views

CVE-2024-11742

CVE-2024-11742 affects SourceCodester Best House Rental Management System 1.0. The vulnerability is a cross-site scripting flaw caused by manipulation of the lastname/firstname/middlename arguments in the file /rental/ajax.php?action=save_tenant. It may be exploited remotely, and the exploit has ...

5.4CVSS6.2AI score0.0053EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/26 8:00 p.m.•17 views

CVE-2024-11742 SourceCodester Best House Rental Management System ajax.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Best House Rental Management System 1.0. This issue affects some unknown processing of the file /rental/ajax.php?action=savetenant. The manipulation of the argument lastname/firstname/middlename leads to cross...

5.3CVSS6.5AI score0.0053EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/11/26 8:00 p.m.•88 views

CVE-2024-11742 SourceCodester Best House Rental Management System ajax.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Best House Rental Management System 1.0. This issue affects some unknown processing of the file /rental/ajax.php?action=savetenant. The manipulation of the argument lastname/firstname/middlename leads to cross...

5.3CVSS0.0053EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/26 12:00 a.m.•2 views

CVE-2024-11742: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Best House Rental Management System 1.0. This issue affects some unknown processing of the file /rental/ajax.php?action=savetenant. The manipulation of the argument lastname/firstname/middlename leads to cross...

5.4CVSS3.6AI score0.0053EPSS
SaveExploits1References1
Rows per page
Query Builder