Lucene search
+L

19434 matches found

Cvelist
Cvelist
•added 2024/09/07 5:31 p.m.•49 views

CVE-2024-8559 SourceCodester Online Food Menu delete-menu.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Food Menu 1.0. This issue affects some unknown processing of the file /endpoint/delete-menu.php. The manipulation of the argument menu leads to sql injection. The attack may be initiated remotely. The explo...

5.8CVSS0.00412EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/09/07 5:31 p.m.•21 views

CVE-2024-8559 SourceCodester Online Food Menu delete-menu.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Food Menu 1.0. This issue affects some unknown processing of the file /endpoint/delete-menu.php. The manipulation of the argument menu leads to sql injection. The attack may be initiated remotely. The explo...

5.8CVSS7.4AI score0.00412EPSS
SaveExploits0References4
CVE
CVE
•added 2024/09/07 5:31 p.m.•72 views

CVE-2024-8559

SourceCodester Online Food Menu 1.0 is affected by a SQL injection in /endpoint/delete-menu.php via the menu parameter. Root cause: unsafely handling user input in that endpoint enables attacker-controlled SQL execution. Impact per provided docs: potential confidentiality, integrity, and availabi...

7.2CVSS5.5AI score0.00412EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2024/09/07 4:15 p.m.•24 views

CVE-2024-8558

A vulnerability classified as problematic was found in SourceCodester Food Ordering Management System 1.0. This vulnerability affects unknown code of the file /foms/routers/place-order.php of the component Price Handler. The manipulation of the argument total leads to improper validation of...

5.3CVSS0.00558EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/09/07 3:31 p.m.•41 views

CVE-2024-8558 SourceCodester Food Ordering Management System Price place-order.php improper validation of specified quantity in input

A vulnerability classified as problematic was found in SourceCodester Food Ordering Management System 1.0. This vulnerability affects unknown code of the file /foms/routers/place-order.php of the component Price Handler. The manipulation of the argument total leads to improper validation of...

5.3CVSS0.00558EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/09/07 3:31 p.m.•21 views

CVE-2024-8558 SourceCodester Food Ordering Management System Price place-order.php improper validation of specified quantity in input

A vulnerability classified as problematic was found in SourceCodester Food Ordering Management System 1.0. This vulnerability affects unknown code of the file /foms/routers/place-order.php of the component Price Handler. The manipulation of the argument total leads to improper validation of...

5.3CVSS4.9AI score0.00558EPSS
SaveExploits1References5
CVE
CVE
•added 2024/09/07 3:31 p.m.•69 views

CVE-2024-8558

The CVE-2024-8558 entry affects SourceCodester Food Ordering Management System 1.0, specifically the Price Handler component in /foms/routers/place-order.php. The vulnerability arises from manipulating the total argument, causing improper validation of the input quantity. The attack can be initia...

5.3CVSS4.8AI score0.00558EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2024/09/07 3:15 p.m.•30 views

CVE-2024-8555

A vulnerability was found in SourceCodester Clinics Patient Management System 2.0. It has been classified as problematic. Affected is an unknown function of the file congratulations.php. The manipulation of the argument gotopage leads to open redirect. It is possible to launch the attack remotely...

6.9CVSS0.00636EPSS
SaveExploits1References5
NVD
NVD
•added 2024/09/07 3:15 p.m.•24 views

CVE-2024-8557

A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System 1.0. This affects an unknown part of the file /foms/routers/cancel-order.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS0.00508EPSS
SaveExploits1References5
CVE
CVE
•added 2024/09/07 3:00 p.m.•75 views

CVE-2024-8557

The CVE-2024-8557 entry concerns SourceCodester Food Ordering Management System 1.0. Affected component: /foms/routers/cancel-order.php. Root cause: manipulation of the id parameter enables SQL injection, allowing remote exploitation. Several sources confirm a publicly disclosed exploit and pract...

7.5CVSS6.9AI score0.00508EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/07 3:00 p.m.•12 views

CVE-2024-8557 SourceCodester Food Ordering Management System cancel-order.php sql injection

A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System 1.0. This affects an unknown part of the file /foms/routers/cancel-order.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS6.8AI score0.00508EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/09/07 3:00 p.m.•56 views

CVE-2024-8557 SourceCodester Food Ordering Management System cancel-order.php sql injection

A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System 1.0. This affects an unknown part of the file /foms/routers/cancel-order.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS0.00508EPSS
SaveExploits1References5
CVE
CVE
•added 2024/09/07 2:31 p.m.•70 views

CVE-2024-8555

CVE-2024-8555 affects SourceCodester Clinics Patient Management System 2.0. The vulnerability is an open redirect in the file congratulations.php caused by manipulation of the goto_page parameter. It can be exploited remotely; the exploit has been disclosed publicly. The provided documents do not...

6.9CVSS4.9AI score0.00636EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/07 2:31 p.m.•19 views

CVE-2024-8555 SourceCodester Clinics Patient Management System congratulations.php redirect

A vulnerability was found in SourceCodester Clinics Patient Management System 2.0. It has been classified as problematic. Affected is an unknown function of the file congratulations.php. The manipulation of the argument gotopage leads to open redirect. It is possible to launch the attack remotely...

6.9CVSS6.9AI score0.00636EPSS
SaveExploits1References5
NVD
NVD
•added 2024/09/07 2:15 p.m.•27 views

CVE-2024-8554

A vulnerability was found in SourceCodester Clinics Patient Management System 2.0 and classified as problematic. This issue affects some unknown processing of the file /users.php. The manipulation of the argument message leads to cross site scripting. The attack may be initiated remotely. The...

5.4CVSS0.00489EPSS
SaveExploits1References5
OSV
OSV
•added 2024/09/07 2:15 p.m.•13 views

CVE-2024-8554

A vulnerability was found in SourceCodester Clinics Patient Management System 2.0 and classified as problematic. This issue affects some unknown processing of the file /users.php. The manipulation of the argument message leads to cross site scripting. The attack may be initiated remotely. The...

5.4CVSS3.8AI score0.00489EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/09/07 1:31 p.m.•44 views

CVE-2024-8554 SourceCodester Clinics Patient Management System users.php cross site scripting

A vulnerability was found in SourceCodester Clinics Patient Management System 2.0 and classified as problematic. This issue affects some unknown processing of the file /users.php. The manipulation of the argument message leads to cross site scripting. The attack may be initiated remotely. The...

5.3CVSS0.00489EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/09/07 1:31 p.m.•26 views

CVE-2024-8554 SourceCodester Clinics Patient Management System users.php cross site scripting

A vulnerability was found in SourceCodester Clinics Patient Management System 2.0 and classified as problematic. This issue affects some unknown processing of the file /users.php. The manipulation of the argument message leads to cross site scripting. The attack may be initiated remotely. The...

5.3CVSS6.2AI score0.00489EPSS
SaveExploits1References5
CVE
CVE
•added 2024/09/07 1:31 p.m.•69 views

CVE-2024-8554

CVE-2024-8554 affects SourceCodester Clinics Patient Management System 2.0. The vulnerable component is the /users.php file, where manipulating the message parameter yields cross-site scripting. The issue enables remote exploitation and the exploit has been disclosed publicly. Public-facing explo...

5.4CVSS4AI score0.00489EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/07 12:00 a.m.•1 views

CVE-2024-8561: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester PHP CRUD 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete.php of the component Delete Person Handler. The manipulation of the argument person leads to sql injection. The attack...

9.8CVSS6.3AI score0.00436EPSS
SaveExploits0References1
Rows per page
Query Builder