Lucene search
+L

204 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/01 12:00 a.m.•2 views

CVE-2024-10609: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System Project 1.0. This affects an unknown part of the file typeadd.php. The manipulation of the argument sex leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

9.8CVSS6.4AI score0.00572EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/10/10 4:31 p.m.•9 views

CVE-2024-9799 SourceCodester Profile Registration without Reload Refresh add.php cross site scripting

A vulnerability has been found in SourceCodester Profile Registration without Reload Refresh 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation of the argument...

5.3CVSS3.8AI score0.00455EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/10 12:00 a.m.•2 views

CVE-2024-9799: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Profile Registration without Reload Refresh 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation of the argument...

6.1CVSS3.6AI score0.00455EPSS
SaveExploits1References1
OSV
OSV
•added 2024/09/23 1:15 a.m.•22 views

CVE-2024-9092

A vulnerability was found in SourceCodester Profile Registration without Reload Refresh 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file add.php of the component Registration Form. The manipulation of the argument fullname leads to cross site...

6.1CVSS3.6AI score0.00455EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/09/23 12:31 a.m.•13 views

CVE-2024-9092 SourceCodester Profile Registration without Reload Refresh Registration Form add.php cross site scripting

A vulnerability was found in SourceCodester Profile Registration without Reload Refresh 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file add.php of the component Registration Form. The manipulation of the argument fullname leads to cross site...

5.3CVSS3.7AI score0.00455EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/09/23 12:31 a.m.•47 views

CVE-2024-9092 SourceCodester Profile Registration without Reload Refresh Registration Form add.php cross site scripting

A vulnerability was found in SourceCodester Profile Registration without Reload Refresh 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file add.php of the component Registration Form. The manipulation of the argument fullname leads to cross site...

5.3CVSS0.00455EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/09/23 12:00 a.m.•12 views

SourceCodester Profile Registration without Reload Refresh 跨站脚本漏洞

SourceCodester Profile Registration without Reload Refresh is a SourceCodester open source application. A cross-site scripting vulnerability exists in SourceCodester Profile Registration without Reload Refresh version 1.0, which stems from the parameter fullname in the file add.php that can lead ...

6.1CVSS4.5AI score0.00455EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/23 12:00 a.m.•2 views

CVE-2024-9092: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Profile Registration without Reload Refresh 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file add.php of the component Registration Form. The manipulation of the argument fullname leads to cross site...

6.1CVSS3.5AI score0.00455EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/09/20 12:00 a.m.•1 views

PT-2024-39380

Name of the Vulnerable Software and Affected Versions itsourcecode Online Bookstore version 1.0 Description A critical issue affects the processing of the file admin add.php, where the manipulation of the image argument leads to unrestricted upload. The attack can be initiated remotely...

6.5CVSS5.5AI score0.00507EPSS
SaveExploits1References11
NVD
NVD
•added 2024/09/07 7:15 p.m.•49 views

CVE-2024-8562

A vulnerability was found in SourceCodester PHP CRUD 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/Add.php. The manipulation of the argument firstname/middlename/lastname leads to cross site scripting. The attack may be launched...

6.1CVSS0.00308EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/09/07 7:00 p.m.•17 views

CVE-2024-8562 SourceCodester PHP CRUD Add.php cross site scripting

A vulnerability was found in SourceCodester PHP CRUD 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/Add.php. The manipulation of the argument firstname/middlename/lastname leads to cross site scripting. The attack may be launched...

5.3CVSS6.3AI score0.00308EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/09/07 7:00 p.m.•49 views

CVE-2024-8562 SourceCodester PHP CRUD Add.php cross site scripting

A vulnerability was found in SourceCodester PHP CRUD 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/Add.php. The manipulation of the argument firstname/middlename/lastname leads to cross site scripting. The attack may be launched...

5.3CVSS0.00308EPSS
SaveExploits0References3
CVE
CVE
•added 2024/09/07 7:00 p.m.•65 views

CVE-2024-8562

CVE-2024-8562 refers to a cross-site scripting vulnerability in SourceCodester PHP CRUD 1.0, affecting the file /endpoint/Add.php. The issue arises from manipulating the arguments first_name, middle_name, and last_name, enabling remote, browser-based script execution. Public exploit discussion is...

6.1CVSS4.1AI score0.00308EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/07 12:00 a.m.•7 views

CVE-2024-8562: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester PHP CRUD 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/Add.php. The manipulation of the argument firstname/middlename/lastname leads to cross site scripting. The attack may be launched...

6.1CVSS3.6AI score0.00308EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/23 12:00 a.m.•2 views

CVE-2024-35375: Unrestricted Upload of File with Dangerous Type

There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS...

9.8CVSS6.7AI score0.00469EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/12/30 12:00 a.m.•15 views

PT-2023-32923 · Unknown · Campcodes Online College Library System

Name of the Vulnerable Software and Affected Versions: Campcodes Online College Library System version 1.0 Description: A critical vulnerability was found in the Campcodes Online College Library System. This issue affects the file /admin/book add.php of the component HTTP POST Request Handler. Th...

8.8CVSS5.7AI score0.00733EPSS
SaveExploits1References8
NVD
NVD
•added 2023/11/17 12:15 a.m.•29 views

CVE-2023-48078

SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter...

9.8CVSS0.00776EPSS
SaveExploits1References1
Prion
Prion
•added 2023/11/17 12:15 a.m.•27 views

Sql injection

SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter...

7.5CVSS8.7AI score0.00776EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/16 12:00 a.m.•5 views

CVE-2023-48078: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter...

9.8CVSS8.3AI score0.00776EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/11/16 12:00 a.m.•12 views

PT-2023-30691 · Unknown · Simple Crud Functionality

Name of the Vulnerable Software and Affected Versions: Simple CRUD Functionality version 1.0 Description: The issue allows attackers to run arbitrary SQL commands via the title parameter in the "add.php" file. This can lead to unauthorized access and manipulation of database content...

9.8CVSS8AI score0.00776EPSS
SaveExploits1References3
Rows per page
Query Builder