Lucene search
+L

482 matches found

OSV
OSV
•added 2024/02/23 4:15 p.m.•14 views

CVE-2024-1823

A vulnerability classified as critical was found in CodeAstro Simple Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file users.php of the component Backend. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit h...

5.3CVSS5.3AI score0.0068EPSS
SaveExploits1References3
Prion
Prion
•added 2024/02/23 4:15 p.m.•36 views

Improper access control

A vulnerability classified as critical was found in CodeAstro Simple Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file users.php of the component Backend. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit h...

5CVSS7.3AI score0.0068EPSS
SaveExploits1References3
CVE
CVE
•added 2024/02/23 3:31 p.m.•107 views

CVE-2024-1823

CVE-2024-1823 affects CodeAstro Simple Voting System 1.0, specifically the Backend users.php file. The root cause is improper access controls on this file, enabling a remote attack. Multiple sources confirm the vulnerability allows unauthorized access, and exploitation details have been publicly ...

5.3CVSS5.5AI score0.0068EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/02/23 3:31 p.m.•19 views

CVE-2024-1823 CodeAstro Simple Voting System Backend users.php access control

A vulnerability classified as critical was found in CodeAstro Simple Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file users.php of the component Backend. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit h...

5.3CVSS5.5AI score0.0068EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/02/23 3:31 p.m.•52 views

CVE-2024-1823 CodeAstro Simple Voting System Backend users.php access control

A vulnerability classified as critical was found in CodeAstro Simple Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file users.php of the component Backend. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit h...

5.3CVSS5.8AI score0.0068EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/23 12:00 a.m.•4 views

CVE-2024-1823: Improper Access Control

A vulnerability classified as critical was found in CodeAstro Simple Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file users.php of the component Backend. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit h...

5.3CVSS5.2AI score0.0068EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/02/23 12:00 a.m.•16 views

CodeAstro Simple Voting System Access Control Error Vulnerability

CodeAstro Simple Voting System is a simple voting system from CodeAstro. An Access Control Error vulnerability exists in CodeAstro Simple Voting System version 1.0, which stems from the file users.php that causes incorrect access control...

5.3CVSS6.8AI score0.0068EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/02/23 12:00 a.m.•18 views

PT-2024-18338 · Codeastro · Codeastro Simple Voting System

Name of the Vulnerable Software and Affected Versions: CodeAstro Simple Voting System version 1.0 Description: A critical vulnerability was found in the CodeAstro Simple Voting System, affecting an unknown functionality of the file users.php of the component Backend. This vulnerability leads to...

5.3CVSS6.9AI score0.0068EPSS
SaveExploits1References8
NVD
NVD
•added 2024/02/14 9:15 a.m.•38 views

CVE-2023-48986

Cross Site Scripting XSS vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the users.php component...

6.1CVSS6.2AI score0.00606EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/14 12:00 a.m.•20 views

CVE-2023-48986

Cross Site Scripting XSS vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the users.php component...

6.2AI score0.00606EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/14 12:00 a.m.•4 views

CVE-2023-48986: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in CU Solutions Group CUSG Content Management System CMS before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the users.php component...

6.1CVSS6.4AI score0.00606EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/01/13 5:31 p.m.•46 views

CVE-2024-0497 Campcodes Student Information System sql injection

A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Users.php?f=save. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

6.5CVSS10AI score0.005EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/13 12:00 a.m.•2 views

CVE-2024-0497: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Users.php?f=save. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS6.6AI score0.005EPSS
SaveExploits0References2
NVD
NVD
•added 2023/12/28 11:15 p.m.•37 views

CVE-2023-7140

A vulnerability was found in code-projects Client Details System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/manage-users.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be...

9.8CVSS0.00644EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/12/28 11:00 p.m.•43 views

CVE-2023-7140 code-projects Client Details System manage-users.php sql injection

A vulnerability was found in code-projects Client Details System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/manage-users.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be...

4.7CVSS10AI score0.00644EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/28 12:00 a.m.•3 views

CVE-2023-7140: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Client Details System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/manage-users.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be...

9.8CVSS5.7AI score0.00644EPSS
SaveExploits1References2
CVE
CVE
•added 2023/12/08 4:31 p.m.•52 views

CVE-2023-6615

CVE-2023-6615 affects Typecho 1.2.1. The vulnerability resides in the unknown functionality of the file /admin/manage-users.php, where manipulating the page argument leads to information disclosure. The issue has been publicly disclosed and may be exploited. Multiple connected sources (e.g., Red ...

5.3CVSS4.4AI score0.00678EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/12/08 4:31 p.m.•44 views

CVE-2023-6615 Typecho manage-users.php information disclosure

A vulnerability, which was classified as problematic, has been found in Typecho 1.2.1. Affected by this issue is some unknown functionality of the file /admin/manage-users.php. The manipulation of the argument page leads to information disclosure. The exploit has been disclosed to the public and...

3.5CVSS5.3AI score0.00678EPSS
SaveExploits1References3
OSV
OSV
•added 2023/12/08 4:31 p.m.•19 views

CVE-2023-6615 Typecho manage-users.php information disclosure

A vulnerability, which was classified as problematic, has been found in Typecho 1.2.1. Affected by this issue is some unknown functionality of the file /admin/manage-users.php. The manipulation of the argument page leads to information disclosure. The exploit has been disclosed to the public and...

3.5CVSS5.1AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/08 12:00 a.m.•7 views

CVE-2023-6615: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, has been found in Typecho 1.2.1. Affected by this issue is some unknown functionality of the file /admin/manage-users.php. The manipulation of the argument page leads to information disclosure. The exploit has been disclosed to the public and...

5.3CVSS5.2AI score0.00678EPSS
SaveExploits1References2
Rows per page
Query Builder