Lucene search
+L

19428 matches found

CNNVD
CNNVD
•added 2024/09/20 12:00 a.m.•13 views

SourceCodester Best House Rental Management System 安全漏洞

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester, Inc. A security vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which is caused by an SQL injection in the parameters firstname/lastname/email...

8.8CVSS7AI score0.00614EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/20 12:00 a.m.•1 views

CVE-2024-9041: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=updateaccount. The manipulation of the argument firstname/lastname/email leads to sql injection. The attack can...

8.8CVSS6.4AI score0.00614EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/20 12:00 a.m.•1 views

CVE-2024-9033: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=savecategory. The manipulation of the argument name leads to cross site scripting. The...

5.4CVSS3.6AI score0.00462EPSS
SaveExploits1References1
OSV
OSV
•added 2024/09/19 11:15 p.m.•11 views

CVE-2024-9008

A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-details.php of the component Comment Section. The manipulation of the argument name leads to sql injection. The attack can be initiated remotel...

9.8CVSS5.7AI score0.00644EPSS
SaveExploits1References5
NVD
NVD
•added 2024/09/19 11:15 p.m.•37 views

CVE-2024-9008

A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-details.php of the component Comment Section. The manipulation of the argument name leads to sql injection. The attack can be initiated remotel...

9.8CVSS0.00644EPSS
SaveExploits1References5
CVE
CVE
•added 2024/09/19 11:00 p.m.•65 views

CVE-2024-9008

CVE-2024-9008 affects SourceCodester Best Online News Portal 1.0, specifically the Comment Section in /news-details.php where manipulation of the name parameter enables SQL injection. The vulnerability enables remote exploitation with no user interaction, and is described as critical/high-impact ...

9.8CVSS7.1AI score0.00644EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2024/09/19 11:00 p.m.•41 views

CVE-2024-9008 SourceCodester Best Online News Portal Comment Section news-details.php sql injection

A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-details.php of the component Comment Section. The manipulation of the argument name leads to sql injection. The attack can be initiated remotel...

6.5CVSS0.00644EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/09/19 11:00 p.m.•15 views

CVE-2024-9008 SourceCodester Best Online News Portal Comment Section news-details.php sql injection

A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-details.php of the component Comment Section. The manipulation of the argument name leads to sql injection. The attack can be initiated remotel...

6.5CVSS7.5AI score0.00644EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/19 12:00 a.m.•0 views

CVE-2024-9008: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-details.php of the component Comment Section. The manipulation of the argument name leads to sql injection. The attack can be initiated remotel...

9.8CVSS6.4AI score0.00644EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/09/19 12:00 a.m.•25 views

PT-2024-39363 · Unknown · Sourcecodester Best Online News Portal

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Online News Portal version 1.0 Description: A critical vulnerability was found in the Comment Section of the SourceCodester Best Online News Portal. The issue affects unknown code in the file /news-details.php. The...

9.8CVSS8.3AI score0.00644EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2024/09/18 12:00 a.m.•9 views

SourceCodester Best House Rental Management System 安全漏洞

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester, Inc. A security vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which originates from an arbitrary file upload vulnerability in the signup function o...

9.8CVSS7AI score0.01082EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/09/18 12:00 a.m.•9 views

Sourcecodester Best House Rental Management System 安全漏洞

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester, Inc. A security vulnerability exists in Sourcecodester Best House Rental Management System version 1.0, which originates from an arbitrary file upload vulnerability in the savesettings...

9.8CVSS7AI score0.01213EPSS
SaveExploits1References2
NVD
NVD
•added 2024/09/17 8:15 p.m.•21 views

CVE-2024-8951

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file managefee.php. The manipulation of the argument toview leads to cross site scripting. The attack can be launched remotely. Th...

6.1CVSS0.00447EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/09/17 8:00 p.m.•15 views

CVE-2024-8951 SourceCodester Resort Reservation System manage_fee.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file managefee.php. The manipulation of the argument toview leads to cross site scripting. The attack can be launched remotely. Th...

5.3CVSS6.2AI score0.00447EPSS
SaveExploits1References5
CVE
CVE
•added 2024/09/17 8:00 p.m.•54 views

CVE-2024-8951

The CVE-2024-8951 entry covers a cross-site scripting vulnerability in SourceCodester Resort Reservation System 1.0, arising from manipulation of the toview argument in the manage_fee.php file. The vulnerability is described as exploitable remotely, with public disclosure of the exploit. Connecte...

6.1CVSS4.1AI score0.00447EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2024/09/17 7:15 p.m.•13 views

CVE-2024-8949

A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. The manipulation of the argument cartid/id leads to improper ownership management. It is possible to...

8.8CVSS5.5AI score0.00723EPSS
SaveExploits0References5
NVD
NVD
•added 2024/09/17 7:15 p.m.•27 views

CVE-2024-8949

A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. The manipulation of the argument cartid/id leads to improper ownership management. It is possible to...

8.8CVSS0.00723EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/09/17 7:00 p.m.•21 views

CVE-2024-8949 SourceCodester Online Eyewear Shop Cart Content Master.php improper ownership management

A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. The manipulation of the argument cartid/id leads to improper ownership management. It is possible to...

6.5CVSS7AI score0.00723EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2024/09/17 7:00 p.m.•44 views

CVE-2024-8949 SourceCodester Online Eyewear Shop Cart Content Master.php improper ownership management

A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. The manipulation of the argument cartid/id leads to improper ownership management. It is possible to...

6.5CVSS0.00723EPSS
SaveExploits0References5
CVE
CVE
•added 2024/09/17 7:00 p.m.•67 views

CVE-2024-8949

Affected software: SourceCodester Online Eyewear Shop 1.0. Vulnerable component/file: Cart Content Handler, specifically the unknown part of /classes/Master.php. Root cause: manipulation of the argument cart_id/id leading to improper ownership management. Impact: remote initiation possible; explo...

8.8CVSS6.8AI score0.00723EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder