Lucene search
+L

19468 matches found

Positive Technologies
Positive Technologies
•added 2024/09/07 12:00 a.m.•11 views

PT-2024-39093 · Sourcecodester · Clinic'S Patient Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinics Patient Management System version 2.0 Description: A vulnerability exists in the system, allowing for an open redirect. The issue is related to the manipulation of the goto page argument in an unknown function of the fi...

6.9CVSS6.9AI score0.00636EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2024/09/07 12:00 a.m.•15 views

PHP CRUD SQL注入漏洞

PHP CRUD is a PHP-based implementation of add, delete, change and retrieve. A SQL injection vulnerability exists in SourceCodester PHP CRUD version 1.0, which originates from the tblpersonid/firstname/middlename/lastname parameters of the /endpoint/update.php file containing a SQL injection...

8.8CVSS7.1AI score0.00415EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/07 12:00 a.m.•1 views

CVE-2024-8560: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Simple Invoice Generator System 1.0. Affected is an unknown function of the file /saveinvoice.php. The manipulation of the argument...

8.8CVSS6.4AI score0.00415EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/07 12:00 a.m.•26 views

PT-2024-39097 · Unknown · Sourcecodester Simple Invoice Generator System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Invoice Generator System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /save invoice.php. The manipulation of the arguments invoice code, customer, cashier,...

8.8CVSS7.2AI score0.00415EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2024/09/07 12:00 a.m.•14 views

PT-2024-39099 · Unknown · Sourcecodester Php Crud

Name of the Vulnerable Software and Affected Versions: SourceCodester PHP CRUD version 1.0 Description: A security issue was discovered in the file /endpoint/Add.php, where the manipulation of the arguments first name, middle name, and last name leads to cross-site scripting. The attack can be...

6.1CVSS4.3AI score0.00308EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/07 12:00 a.m.•1 views

CVE-2024-8559: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Online Food Menu 1.0. This issue affects some unknown processing of the file /endpoint/delete-menu.php. The manipulation of the argument menu leads to sql injection. The attack may be initiated remotely. The explo...

7.2CVSS5.3AI score0.00412EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/09/07 12:00 a.m.•9 views

SourceCodester Clinics Patient Management System 输入验证错误漏洞

SourceCodester Clinics Patient Management System is a clinic patient management system from SourceCodester, Inc. An input validation error vulnerability exists in SourceCodester Clinics Patient Management System version 2.0, which stems from the parameter gotopage in the file congratulations.php...

6.9CVSS5AI score0.00636EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2024/09/07 12:00 a.m.•16 views

PT-2024-39098 · Sourcecodester · Sourcecodester Php Crud

Name of the Vulnerable Software and Affected Versions: SourceCodester PHP CRUD version 1.0 Description: A critical issue has been found in the Delete Person Handler component, specifically in the file /endpoint/delete.php. The manipulation of the person argument leads to SQL injection. This issue...

9.8CVSS7.3AI score0.00436EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/07 12:00 a.m.•2 views

CVE-2024-8557: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System 1.0. This affects an unknown part of the file /foms/routers/cancel-order.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS6.4AI score0.00508EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/07 12:00 a.m.•3 views

CVE-2024-8558: Improper Validation of Specified Quantity in Input

A vulnerability classified as problematic was found in SourceCodester Food Ordering Management System 1.0. This vulnerability affects unknown code of the file /foms/routers/place-order.php of the component Price Handler. The manipulation of the argument total leads to improper validation of...

5.3CVSS5.1AI score0.00558EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/07 12:00 a.m.•2 views

CVE-2024-8563: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/update.php. The manipulation of the argument firstname/middlename/lastname leads to cross site scripting. It is possible to initiate the attack...

6.1CVSS3.8AI score0.00401EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/07 12:00 a.m.•3 views

CVE-2024-8562: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester PHP CRUD 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/Add.php. The manipulation of the argument firstname/middlename/lastname leads to cross site scripting. The attack may be launched...

6.1CVSS3.6AI score0.00308EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/06 1:15 p.m.•15 views

CVE-2024-44739

Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...

8.8CVSS5.8AI score0.00543EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/06 1:15 p.m.•22 views

CVE-2024-44739

Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...

8.8CVSS0.00543EPSS
SaveExploits1References1
CVE
CVE
•added 2024/09/06 12:00 a.m.•89 views

CVE-2024-44739

Sourcecodester Simple Forum Website v1.0 is vulnerable to a SQL injection flaw located in the /php-sqlite-forum/?page=manage_user&id= endpoint. This vulnerability arises from the improper neutralization of special elements used in an SQL command, potentially allowing an attacker to interfere with...

8.8CVSS5.8AI score0.00543EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/09/06 12:00 a.m.•31 views

CVE-2024-44739

Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...

0.00543EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2024/09/06 12:00 a.m.•256 views

Online Pizza Ordering System 1.0 Insecure Settings

============================================================================================================================================= | Title : Online Pizza Ordering System v1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla...

7.4AI score
SaveExploits0
CNNVD
CNNVD
•added 2024/09/06 12:00 a.m.•13 views

Sourcecodester Simple Forum Website 安全漏洞

SourceCodester Simple Forum Website is a simple forum website from SourceCodester, Inc. A security vulnerability exists in Sourcecodester Simple Forum Website v1.0, which originates from a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...

8.8CVSS8AI score0.00543EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/09/06 12:00 a.m.•15 views

CVE-2024-44739

Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...

7.9AI score0.00543EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/06 12:00 a.m.•2 views

CVE-2024-44739: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...

8.8CVSS5.8AI score0.00543EPSS
SaveExploits1References1
Rows per page
Query Builder