Lucene search
+L

5186 matches found

NVD
NVD
•added 2023/05/12 10:15 a.m.•43 views

CVE-2023-2678

A vulnerability has been found in SourceCodester File Tracker Manager System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /filemanager/admin/saveuser.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross si...

5.4CVSS4.3AI score0.00592EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2023/05/12 10:15 a.m.•14 views

CVE-2023-2678

A vulnerability has been found in SourceCodester File Tracker Manager System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /filemanager/admin/saveuser.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross si...

5.4CVSS3.8AI score0.00592EPSS
SaveExploits1References3
Prion
Prion
•added 2023/05/12 10:15 a.m.•26 views

Cross site scripting

A vulnerability has been found in SourceCodester File Tracker Manager System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /filemanager/admin/saveuser.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross si...

4CVSS5.3AI score0.00592EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/05/12 9:31 a.m.•55 views

CVE-2023-2678 SourceCodester File Tracker Manager System POST Parameter save_user.php cross site scripting

A vulnerability has been found in SourceCodester File Tracker Manager System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /filemanager/admin/saveuser.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross si...

4CVSS5.6AI score0.00592EPSS
SaveExploits1References3
CVE
CVE
•added 2023/05/12 9:31 a.m.•77 views

CVE-2023-2678

The CVE-2023-2678 entry concerns SourceCodester File Tracker Manager System 1.0. The vulnerability affects the file /file_manager/admin/save_user.php in the POST Parameter Handler, where manipulating the firstname parameter leads to cross-site scripting (XSS). Exploitation is remote and the explo...

5.4CVSS4.5AI score0.00592EPSS
SaveExploits1References3Affected Software1
Debian
Debian
•added 2023/05/12 9:29 a.m.•49 views

[SECURITY] [DLA 3419-1] webkit2gtk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3419-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort May 12, 2023 https://wiki.debian.org/LTS -...

8.8CVSS9AI score0.27076EPSS
SaveExploits1
CNNVD
CNNVD
•added 2023/05/12 12:00 a.m.•19 views

Time Tracker SQL Injection Vulnerability

Anuko Time Tracker is an open source time counting system for individual developers. A platform for counting the time spent by employees on various tasks. A SQL injection vulnerability exists in versions prior to Time Tracker 1.22.13.5792, which stems from a blind time-based injection vulnerabili...

9.8CVSS8.6AI score0.00721EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/05/12 12:00 a.m.•17 views

File Tracker Manager System Cross-site Scripting Vulnerability

File Tracker Manager System is a file tracker manager system. File Tracker Manager System v1.0 version of a cross-site scripting vulnerability, the vulnerability stems from the /filemanager/admin/saveuser.php parameter firstname of the user-supplied data lack of effective filtering and escaping, ...

5.4CVSS6.2AI score0.00592EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/12 12:00 a.m.•10 views

CVE-2023-2678: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester File Tracker Manager System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /filemanager/admin/saveuser.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross si...

5.4CVSS3.8AI score0.00592EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/12 12:00 a.m.•7 views

CVE-2023-32306: Improper Neutralization of Special Elements used in an SQL Command

Time Tracker is an open source time tracking system. A time-based blind injection vulnerability existed in Time Tracker reports in versions prior to 1.22.13.5792. This was happening because the reports.php page was not validating all parameters in POST requests. Because some parameters were not...

9.8CVSS5.7AI score0.00721EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/05/12 12:00 a.m.•23 views

PT-2023-23715 · Unknown · Time Tracker

Name of the Vulnerable Software and Affected Versions: Time Tracker versions prior to 1.22.13.5792 Description: A time-based blind injection issue existed in Time Tracker reports due to the reports.php page not validating all parameters in POST requests. This allowed malicious SQL to be crafted f...

9.8CVSS9.5AI score0.00721EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/05/12 12:00 a.m.•15 views

PT-2023-20794 · Sourcecodester · Sourcecodester File Tracker Manager System

Name of the Vulnerable Software and Affected Versions: SourceCodester File Tracker Manager System version 1.0 Description: A vulnerability has been found in the SourceCodester File Tracker Manager System, affecting the file /file manager/admin/save user.php of the component POST Parameter Handler...

5.4CVSS4.2AI score0.00592EPSS
SaveExploits1References5
Debian
Debian
•added 2023/05/11 4:36 p.m.•68 views

[SECURITY] [DSA 5401-1] postgresql-13 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5401-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 11, 2023 https://www.debian.org/security/faq -...

7.2CVSS7.7AI score0.01199EPSS
SaveExploits0
Debian
Debian
•added 2023/05/11 8:19 a.m.•30 views

[SECURITY] [DLA 3417-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3417-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort May 11, 2023 https://wiki.debian.org/LTS -...

8.8CVSS8.3AI score0.00753EPSS
SaveExploits0
osv_cve
osv_cve
•added 2023/05/11 7:15 a.m.•20 views

CVE-2023-2643

A vulnerability classified as critical was found in SourceCodester File Tracker Manager System 1.0. This vulnerability affects unknown code of the file register/updatepassword.php of the component POST Parameter Handler. The manipulation of the argument newpassword leads to sql injection. The...

9.8CVSS5.7AI score0.00726EPSS
SaveExploits1References3
NVD
NVD
•added 2023/05/11 7:15 a.m.•61 views

CVE-2023-2643

A vulnerability classified as critical was found in SourceCodester File Tracker Manager System 1.0. This vulnerability affects unknown code of the file register/updatepassword.php of the component POST Parameter Handler. The manipulation of the argument newpassword leads to sql injection. The...

9.8CVSS7.5AI score0.00726EPSS
SaveExploits1References3
Prion
Prion
•added 2023/05/11 7:15 a.m.•27 views

Sql injection

A vulnerability classified as critical was found in SourceCodester File Tracker Manager System 1.0. This vulnerability affects unknown code of the file register/updatepassword.php of the component POST Parameter Handler. The manipulation of the argument newpassword leads to sql injection. The...

6.5CVSS9.8AI score0.00726EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/05/11 6:31 a.m.•78 views

CVE-2023-2643

CVE-2023-2643 concerns the SourceCodester File Tracker Manager System 1.0. The vulnerability resides in the file register/update_password.php within the POST Parameter Handler, where modification of the argument new_password enables SQL injection. This is a network-based issue with remote exploit...

9.8CVSS8.4AI score0.00726EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2023/05/11 12:00 a.m.•45 views

File Tracker Manager System SQL Injection Vulnerability

File Tracker Manager System is a file tracker manager system. File Tracker Manager System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the parameter newpassword in the file register/updatepassword.php against externally entered SQL statements. A...

9.8CVSS8.1AI score0.00726EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/11 12:00 a.m.•5 views

CVE-2023-2643: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester File Tracker Manager System 1.0. This vulnerability affects unknown code of the file register/updatepassword.php of the component POST Parameter Handler. The manipulation of the argument newpassword leads to sql injection. The...

9.8CVSS5.5AI score0.00726EPSS
SaveExploits1References2
Rows per page
Query Builder