Lucene search
+L

19498 matches found

OSV
OSV
•added 2024/08/20 2:15 a.m.•29 views

CVE-2024-7949

A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknown function of the file /tracking/admin/fetchgenderit.php. The manipulation of the argument request leads to sql injection. It is possible to launch the atta...

8.8CVSS5.7AI score0.0054EPSS
SaveExploits1References5
NVD
NVD
•added 2024/08/20 2:15 a.m.•26 views

CVE-2024-7949

A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknown function of the file /tracking/admin/fetchgenderit.php. The manipulation of the argument request leads to sql injection. It is possible to launch the atta...

8.8CVSS0.0054EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/08/20 2:00 a.m.•44 views

CVE-2024-7949 SourceCodester Online Graduate Tracer System fetch_genderit.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknown function of the file /tracking/admin/fetchgenderit.php. The manipulation of the argument request leads to sql injection. It is possible to launch the atta...

6.5CVSS0.0054EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/08/20 2:00 a.m.•20 views

CVE-2024-7949 SourceCodester Online Graduate Tracer System fetch_genderit.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknown function of the file /tracking/admin/fetchgenderit.php. The manipulation of the argument request leads to sql injection. It is possible to launch the atta...

6.5CVSS7.6AI score0.0054EPSS
SaveExploits1References5
CVE
CVE
•added 2024/08/20 2:00 a.m.•68 views

CVE-2024-7949

CVE-2024-7949 corresponds to a SQL injection vulnerability in SourceCodester Online Graduate Tracer System up to version 1.0, triggered by manipulating an input argument in /tracking/admin/fetch_genderit.php. The issue is exploitable remotely and information about the exploit has been publicly di...

8.8CVSS6.8AI score0.0054EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2024/08/20 2:00 a.m.•36 views

CVE-2024-7948 SourceCodester Accounts Manager App Update Account Page update-account.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of the file update-account.php of the component Update Account Page. The manipulation of the argument Account Name/Username/Password/Link leads to cross site...

5.3CVSS0.00447EPSS
SaveExploits1References4
CVE
CVE
•added 2024/08/20 2:00 a.m.•65 views

CVE-2024-7948

The CVE-2024-7948 entry concerns SourceCodester Accounts Manager App 1.0. The vulnerability lies in the Update Account Page’s update-account.php where manipulating parameters (Account Name, Username, Password, Link) enables cross-site scripting. Descriptions across multiple sources indicate remot...

5.4CVSS4AI score0.00447EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/08/20 1:31 a.m.•41 views

CVE-2024-7947 SourceCodester Point of Sales and Inventory Management System login.php sql injection

A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploi...

7.5CVSS0.00701EPSS
SaveExploits1References4
CVE
CVE
•added 2024/08/20 1:31 a.m.•69 views

CVE-2024-7947

CVE-2024-7947 affects SourceCodester Point of Sales and Inventory Management System 1.0. The vulnerability resides in an injectable parameter within the file login.php where modifying the email argument enables an SQL injection. Exploitation can be performed remotely, and public disclosures indic...

9.8CVSS7.5AI score0.00701EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/08/20 1:31 a.m.•26 views

CVE-2024-7947 SourceCodester Point of Sales and Inventory Management System login.php sql injection

A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploi...

7.5CVSS7.7AI score0.00701EPSS
SaveExploits1References4
NVD
NVD
•added 2024/08/20 1:15 a.m.•44 views

CVE-2024-7942

A vulnerability has been found in SourceCodester Leads Manager Tool 1.0 and classified as problematic. This vulnerability affects unknown code of the file update-leads.php. The manipulation of the argument phonenumber leads to cross site scripting. The attack can be initiated remotely. The exploi...

5.4CVSS0.00412EPSS
SaveExploits1References4
CVE
CVE
•added 2024/08/20 12:00 a.m.•92 views

CVE-2024-7942

CVE-2024-7942 affects SourceCodester Leads Manager Tool 1.0, specifically the update-leads.php file. The vulnerability is a cross-site scripting (XSS) issue triggered by a manipulated phone_number argument and can be exploited remotely. The public exploit is noted in multiple references. The conn...

5.4CVSS6.6AI score0.00412EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/08/20 12:00 a.m.•45 views

CVE-2024-7942 SourceCodester Leads Manager Tool update-leads.php cross site scripting

A vulnerability has been found in SourceCodester Leads Manager Tool 1.0 and classified as problematic. This vulnerability affects unknown code of the file update-leads.php. The manipulation of the argument phonenumber leads to cross site scripting. The attack can be initiated remotely. The exploi...

5.3CVSS0.00412EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/08/20 12:00 a.m.•17 views

CVE-2024-7942 SourceCodester Leads Manager Tool update-leads.php cross site scripting

A vulnerability has been found in SourceCodester Leads Manager Tool 1.0 and classified as problematic. This vulnerability affects unknown code of the file update-leads.php. The manipulation of the argument phonenumber leads to cross site scripting. The attack can be initiated remotely. The exploi...

5.3CVSS6.4AI score0.00412EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/08/20 12:00 a.m.•18 views

SourceCodester Leads Manager Tool 跨站脚本漏洞

SourceCodester Leads Manager Tool is a leads management tool from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Leads Manager Tool version 1.0, which stems from the parameter phonenumber in the file update-leads.php that can lead to cross-site scripting attack...

5.4CVSS4.4AI score0.00412EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/08/20 12:00 a.m.•15 views

SourceCodester Online Graduate Tracer System SQL注入漏洞

SourceCodester Online Graduate Tracer System is a web-based application project developed by SourceCodester using PHP and MySQL database. Its main purpose is to provide a platform for a school to track their alumni and generate graphical reports on alumni status. SourceCodester Online Graduate...

8.8CVSS7AI score0.0054EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/08/20 12:00 a.m.•18 views

SourceCodester Point of Sales and Inventory Management System SQL注入漏洞

SourceCodester Point of Sales and Inventory Management System is a point of sale and inventory management system from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Point of Sales and Inventory Management System version 1.0, which originates from a SQL injection...

9.8CVSS7.9AI score0.00701EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/20 12:00 a.m.•2 views

CVE-2024-7949: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Online Graduate Tracer System up to 1.0. Affected is an unknown function of the file /tracking/admin/fetchgenderit.php. The manipulation of the argument request leads to sql injection. It is possible to launch the atta...

8.8CVSS6.3AI score0.0054EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/20 12:00 a.m.•1 views

CVE-2024-7948: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of the file update-account.php of the component Update Account Page. The manipulation of the argument Account Name/Username/Password/Link leads to cross site...

5.4CVSS3.6AI score0.00447EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/08/20 12:00 a.m.•11 views

SourceCodester Accounts Manager App 跨站脚本漏洞

SourceCodester Accounts Manager App is a web-based application from SourceCodester, Inc. It is designed to efficiently and securely manage online accounts. A cross-site scripting vulnerability exists in version 1.0 of the SourceCodester Accounts Manager App, which stems from the parameter Account...

5.4CVSS4.3AI score0.00447EPSS
SaveExploits1References5
Rows per page
Query Builder