Lucene search
+L

1492 matches found

Cvelist
Cvelist
•added 2024/06/06 12:31 p.m.•56 views

CVE-2024-36779

Sourcecodester Stock Management System v1.0 is vulnerable to SQL Injection via editCategories.php...

7.6AI score0.00572EPSS
SaveExploits1References1
CVE
CVE
•added 2024/06/06 12:31 p.m.•110 views

CVE-2024-36779

CVE-2024-36779 affects Sourcecodester Stock Management System v1.0 . The vulnerability is an SQL Injection via the file editCategories.php , caused by improper input handling. The CVSS 3.1 metrics indicate a CRITICAL impact with C/H/I/A = High and a network attack vector without user interaction....

9.8CVSS8.4AI score0.00572EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2024/06/06 12:00 a.m.•16 views

Sourcecodester Stock Management System Security Vulnerability

Sourcecodester Stock Management System is an inventory management system. A security vulnerability exists in Stock Management System v1.0. An attacker can exploit this vulnerability to conduct an SQL injection attack via editCategories.php...

9.8CVSS7.9AI score0.00572EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/06/06 12:00 a.m.•29 views

PT-2024-27159 · Unknown · Sourcecodester Stock Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Stock Management System version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the editCategories.php file. This allows for potential unauthorized access to database information...

9.8CVSS8AI score0.00572EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/06 12:00 a.m.•5 views

CVE-2024-36779: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Stock Management System v1.0 is vulnerable to SQL Injection via editCategories.php...

9.8CVSS5.7AI score0.00572EPSS
SaveExploits1References1
NVD
NVD
•added 2024/06/05 12:15 p.m.•28 views

CVE-2024-1662

Missing Authentication for Critical Function, Missing Authorization vulnerability in PORTY Smart Tech Technology Joint Stock Company PowerBank Application allows Retrieve Embedded Sensitive Data. This issue affects PowerBank Application: before 2.02...

7.5CVSS6.9AI score0.0041EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/06/05 11:51 a.m.•44 views

CVE-2024-1662 Information Disclosure in Porty's PowerBank

Missing Authentication for Critical Function, Missing Authorization vulnerability in PORTY Smart Tech Technology Joint Stock Company PowerBank Application allows Retrieve Embedded Sensitive Data. This issue affects PowerBank Application: before 2.02...

7.5CVSS6.9AI score0.0041EPSS
SaveExploits0References2
OSV
OSV
•added 2024/05/30 1:15 p.m.•13 views

CVE-2024-5515

A vulnerability was found in SourceCodester Stock Management System 1.0. It has been classified as critical. Affected is an unknown function of the file createBrand.php. The manipulation of the argument brandName leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

9.8CVSS5.8AI score0.00637EPSS
SaveExploits1References4
NVD
NVD
•added 2024/05/30 1:15 p.m.•27 views

CVE-2024-5515

A vulnerability was found in SourceCodester Stock Management System 1.0. It has been classified as critical. Affected is an unknown function of the file createBrand.php. The manipulation of the argument brandName leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

9.8CVSS6.8AI score0.00637EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/05/30 1:00 p.m.•22 views

CVE-2024-5515 SourceCodester Stock Management System createBrand.php sql injection

A vulnerability was found in SourceCodester Stock Management System 1.0. It has been classified as critical. Affected is an unknown function of the file createBrand.php. The manipulation of the argument brandName leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

6.5CVSS7.4AI score0.00637EPSS
SaveExploits1References4
CVE
CVE
•added 2024/05/30 1:00 p.m.•75 views

CVE-2024-5515

CVE-2024-5515 affects SourceCodester Stock Management System 1.0, with a SQL injection in createBrand.php via the brandName parameter. The vulnerability is exploitable remotely and has been disclosed publicly. Root cause is improper handling of user input in a SQL query, allowing injection. The C...

9.8CVSS6.8AI score0.00637EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/05/30 1:00 p.m.•39 views

CVE-2024-5515 SourceCodester Stock Management System createBrand.php sql injection

A vulnerability was found in SourceCodester Stock Management System 1.0. It has been classified as critical. Affected is an unknown function of the file createBrand.php. The manipulation of the argument brandName leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

6.5CVSS6.8AI score0.00637EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/05/30 12:00 a.m.•22 views

SourceCodester Stock Management System SQL注入漏洞

Sourcecodester Stock Management System is an inventory management system. A SQL injection vulnerability exists in SourceCodester Stock Management System version 1.0, which stems from a SQL injection caused by the brandName parameter of the file createBrand.php...

9.8CVSS7.1AI score0.00637EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/30 12:00 a.m.•4 views

CVE-2024-5515: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Stock Management System 1.0. It has been classified as critical. Affected is an unknown function of the file createBrand.php. The manipulation of the argument brandName leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

9.8CVSS6.4AI score0.00637EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/05/30 12:00 a.m.•21 views

PT-2024-36486 · Unknown · Sourcecodester Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Stock Management System version 1.0 Description: A critical issue was found in the SourceCodester Stock Management System, affecting an unknown function of the file createBrand.php. The manipulation of the brandName argument...

9.8CVSS7.5AI score0.00637EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2024/05/14 12:00 a.m.•17 views

WordPress plugin The Back In Stock Notifier for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...

6.5CVSS7.5AI score0.00491EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•4 views

CVE-2024-4038: Improper Control of Generation of Code

The The Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro plugin for WordPress for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.3.1. This is due to the plugin for WordPress allowing users to execute an action that does not proper...

6.5CVSS6.3AI score0.00491EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/09 12:00 a.m.•5 views

PT-2024-28821

Name of the Vulnerable Software and Affected Versions The Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro plugin for WordPress versions up to, and including, 5.3.1 Description The issue arises from the plugin allowing users to execute an action without properly validating a valu...

6.5CVSS6.4AI score0.00491EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/05/08 2:08 a.m.•24 views

WordPress Back In Stock Notifier for WooCommerce plugin <= 5.3.1 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by stealthcopter in WordPress Plugin Back In Stock Notifier for WooCommerce versions = 5.3.1...

6.5CVSS7.1AI score0.00491EPSS
SaveExploits0References1Affected Software1
zdt
zdt
•added 2024/04/15 12:00 a.m.•437 views

Stock Management System v1.0 - Unauthenticated SQL Injection Exploit

Exploit Title: Stock Management System v1.0 - Unauthenticated SQL Injection Exploit Author: Josué Mier aka blu3ming Security Researcher & Penetration Tester @wizlynx group Vendor Homepage: https://www.sourcecodester.com/php/15023/stock-management-system-phpoop-source-code.html Software Link:...

9.8CVSS9.7AI score0.0135EPSS
SaveExploits4
Rows per page
Query Builder