Lucene search
+L

15977 matches found

CNVD
CNVD
•added 2023/04/11 12:00 a.m.•92 views

Online Computer and Laptop Store Path Traversal Vulnerability

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. A path traversal vulnerability exists in Online Computer and Laptop Store v1.0. The vulnerability stems from the fact that the parameter path in the file /classes/Master.php?f=deleteim...

8.5AI score0.01075EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/04/11 12:00 a.m.•33 views

PT-2023-17393 · Sourcecodester · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue was found in the function delete order of the file /classes/master.php?f=delete order. The manipulation of the argument id leads to sql injection. It is...

7.2CVSS6.9AI score0.00767EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2023/04/11 12:00 a.m.•25 views

PT-2023-17395 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A vulnerability was found in the software, classified as problematic. It affects some unknown functionality of the file /admin/?page=maintenance/brand. The manipulation ...

4.8CVSS4.4AI score0.00646EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2023/04/11 12:00 a.m.•23 views

PT-2023-17392 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue has been found in the function save brand of the file /classes/Master.php?f=save brand. The manipulation of the argument name leads to sql injection. Th...

7.2CVSS7.2AI score0.00767EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2023/04/11 12:00 a.m.•23 views

SQL Injection Vulnerability in Online Computer and Laptop Stores

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. An SQL injection vulnerability exists in SourceCodester Online Computer and Laptop Store version 1.0, which stems from an improper manipulation of the parameter name that can lead to sql...

7.2CVSS6.8AI score0.00767EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/04/11 12:00 a.m.•20 views

Online Computer and Laptop Store Cross-site Script Vulnerability

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. A cross-site scripting vulnerability exists in Online Computer and Laptop Store v1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the Brand...

4.8CVSS6.1AI score0.00646EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/11 12:00 a.m.•8 views

CVE-2023-1987: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is the function updateorderstatus of the file /classes/Master.php?f=updateorderstatus. The manipulation of the argument id leads to sql injection. The...

7.2CVSS5.5AI score0.00767EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/11 12:00 a.m.•8 views

CVE-2023-1985: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. This issue affects the function savebrand of the file /classes/Master.php?f=savebrand. The manipulation of the argument name leads to sql injection. The attack may be initiate...

7.2CVSS5.5AI score0.00767EPSS
SaveExploits1References3
CNVD
CNVD
•added 2023/04/10 12:00 a.m.•44 views

Online Computer and Laptop Store SQL Injection Vulnerability

Online Computer and Laptop Store is an online computer and laptop sales system. Online Computer and Laptop Store is vulnerable to SQL injection, which can be exploited by attackers to perform SQL injection and steal data, among other things...

9.2AI score0.00717EPSS
SaveExploits1
CNVD
CNVD
•added 2023/04/10 12:00 a.m.•50 views

Online Computer and Laptop Store Cross-Site Scripting Vulnerability

Online Computer and Laptop Store is an online computer and laptop sales system. Online Computer and Laptop Store version 1.0 contains a cross-site scripting vulnerability that can be exploited by attackers to inject malicious JavaScript scripts...

5.8AI score0.00473EPSS
SaveExploits0
Exploit DB
Exploit DB
•added 2023/04/10 12:00 a.m.•298 views

Online Computer and Laptop Store 1.0 - Remote Code Execution (RCE)

!/usr/bin/env python3 Exploit Title: Online Computer and Laptop Store 1.0 - Remote Code Execution RCE Date: 09/04/2023 Exploit Author: Matisse Beckandt Backendt Vendor Homepage:...

9.8CVSS6.8AI score0.04353EPSS
SaveExploits4
osv_cve
osv_cve
•added 2023/04/08 12:15 p.m.•23 views

CVE-2023-1961

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/?page=systeminfo. The manipulation of the argument System Name leads to cross site scripting. It is possible to launch the...

6.1CVSS3.7AI score0.00473EPSS
SaveExploits0References3
NVD
NVD
•added 2023/04/08 12:15 p.m.•34 views

CVE-2023-1961

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/?page=systeminfo. The manipulation of the argument System Name leads to cross site scripting. It is possible to launch the...

6.1CVSS4.3AI score0.00473EPSS
SaveExploits0References3
CVE
CVE
•added 2023/04/08 11:31 a.m.•84 views

CVE-2023-1961

CVE-2023-1961 affects SourceCodester Online Computer and Laptop Store 1.0. The vulnerability is a cross-site scripting flaw in the unknown function behind the endpoint /admin/?page=system_info, triggered by manipulating the System Name parameter. It can be exploited remotely, and the exploit has ...

6.1CVSS4.8AI score0.00473EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/04/08 11:31 a.m.•49 views

CVE-2023-1961 SourceCodester Online Computer and Laptop Store cross site scripting

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/?page=systeminfo. The manipulation of the argument System Name leads to cross site scripting. It is possible to launch the...

3.3CVSS6.2AI score0.00473EPSS
SaveExploits0References3
CVE
CVE
•added 2023/04/08 11:31 a.m.•88 views

CVE-2023-1960

SourceCodester Online Computer and Laptop Store 1.0 is affected by CVE-2023-1960 via SQL injection in /classes/Master.php?f=delete_category (id parameter). The issue allows remote exploitation and is classified as critical; exploit information has been disclosed publicly. Multiple sources confirm...

8.8CVSS7.8AI score0.00717EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/04/08 11:31 a.m.•54 views

CVE-2023-1960 SourceCodester Online Computer and Laptop Store sql injection

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php?f=deletecategory. The manipulation of the argument id leads to sql injection. The attack may be initiated remotel...

6.5CVSS9.2AI score0.00717EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2023/04/08 11:15 a.m.•15 views

CVE-2023-1959

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=savecategory. The manipulation of the argument category leads to sql injection. The attack can be initiated...

8.8CVSS6.5AI score0.00717EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2023/04/08 11:15 a.m.•25 views

CVE-2023-1957

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=savesubcategory of the component Subcategory Handler. The manipulation of the argument...

8.8CVSS6.5AI score0.00717EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2023/04/08 11:15 a.m.•20 views

CVE-2023-1958

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file /classes/Master.php?f=deletesubcategory. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

9.8CVSS6.5AI score0.00726EPSS
SaveExploits1References3
Rows per page
Query Builder