Lucene search
+L

3457 matches found

CNNVD
CNNVD
added 2023/12/22 12:00 a.m.9 views

School Visitor Log e-Book Cross-Site Scripting Vulnerability

School Visitor Log e-Book is a School Visitor Log e-Book by Remy Andrade Personal Developer. School Visitor Log e-Book suffers from a cross-site scripting vulnerability that stems from a cross-site scripting vulnerability in log-book.php...

5.4CVSS6.2AI score0.00538EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/12/20 12:00 a.m.10 views

PT-2023-31251 · Unknown · Book Store Management System

Name of the Vulnerable Software and Affected Versions: Book Store Management System version 1.0 Description: A cross-site scripting XSS issue was found in the /bsms ci/index.php/history endpoint, allowing attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the...

6.1CVSS6AI score0.00573EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2023/12/20 12:00 a.m.15 views

PT-2023-31252 · Unknown · Book Store Management System

Name of the Vulnerable Software and Affected Versions: Book Store Management System version v1 Description: The issue allows attackers to access unauthorized pages and execute administrative functions without authenticating, due to incorrect access control. Recommendations: For Book Store...

9.8CVSS7.4AI score0.00955EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2023/12/20 12:00 a.m.12 views

PT-2023-31250 · Unknown · Book Store Management System

Name of the Vulnerable Software and Affected Versions: Book Store Management System version 1.0 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter in the "/bsms ci/index.php/category" API endpoint. This enabl...

6.1CVSS7.1AI score0.00573EPSS
SaveExploits1References7
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.30 views

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device. The specific flaw exists within the handling of the Phone...

7.1CVSS7.3AI score0.0229EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/13 6:15 p.m.28 views

CVE-2023-6767

A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Guest e-Book 1.0. This affects an unknown part of the file /endpoint/add-guest.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The...

6.1CVSS0.00579EPSS
SaveExploits0References2
OSV
OSV
added 2023/12/13 6:15 p.m.10 views

CVE-2023-6767

A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Guest e-Book 1.0. This affects an unknown part of the file /endpoint/add-guest.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The...

6.1CVSS4.1AI score0.00579EPSS
SaveExploits0References2
Prion
Prion
added 2023/12/13 6:15 p.m.23 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Guest e-Book 1.0. This affects an unknown part of the file /endpoint/add-guest.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The...

5CVSS6.5AI score0.00579EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/13 6:00 p.m.14 views

CVE-2023-6767 SourceCodester Wedding Guest e-Book add-guest.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Guest e-Book 1.0. This affects an unknown part of the file /endpoint/add-guest.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The...

5CVSS6.3AI score0.00579EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/12/13 6:00 p.m.41 views

CVE-2023-6767 SourceCodester Wedding Guest e-Book add-guest.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Guest e-Book 1.0. This affects an unknown part of the file /endpoint/add-guest.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The...

5CVSS6.2AI score0.00579EPSS
SaveExploits0References2
CVE
CVE
added 2023/12/13 6:00 p.m.47 views

CVE-2023-6767

CVE-2023-6767 affects SourceCodester Wedding Guest e-Book 1.0, with a cross-site scripting vulnerability in /endpoint/add-guest.php caused by manipulation of the name argument. This allows remote initiation of an attack. Multiple connected sources confirm the issue but do not provide exploit code...

6.1CVSS4.8AI score0.00579EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/13 12:00 a.m.11 views

PT-2023-32768 · Sourcecodester · Sourcecodester Wedding Guest E-Book

Name of the Vulnerable Software and Affected Versions: SourceCodester Wedding Guest e-Book version 1.0 Description: A vulnerability was found in SourceCodester Wedding Guest e-Book, affecting an unknown part of the file "/endpoint/add-guest.php". The manipulation of the name argument leads to...

6.1CVSS4.8AI score0.00579EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/12/13 12:00 a.m.11 views

Wedding Guest e-Book Cross-Site Scripting Vulnerability

Wedding Guest e-Book is a wedding guest e-book by rems individual developer. A cross-site scripting vulnerability exists in SourceCodester Wedding Guest e-Book version 1.0, which stems from a cross-site scripting XSS vulnerability in file /endpoint/add-guest.php...

6.1CVSS5.9AI score0.00579EPSS
SaveExploits0References3
Spring Security Advisories
Spring Security Advisories
added 2023/12/07 12:00 a.m.20 views

A Bootiful Podcast: Spring creator Rod Johnson and Oracle vice president Heather VanCura

Hi, Spring and software fans! In this installment of the show we have Spring creator and investor Rod Johnson and Oracle vice president Heather VanCura on the show to talk about the premise of her new book - Developer Career Masterplan, coauthored with fellow Java luminary Bruno Souza: building...

6.9AI score
SaveExploits0
NVD
NVD
added 2023/11/30 9:15 p.m.24 views

CVE-2023-6440

A vulnerability was found in SourceCodester Book Borrower System 1.0 and classified as problematic. This issue affects some unknown processing of the file endpoint/add-book.php. The manipulation of the argument Book Title/Book Author leads to cross site scripting. The attack may be initiated...

5.4CVSS0.00611EPSS
SaveExploits1References3
OSV
OSV
added 2023/11/30 9:15 p.m.9 views

CVE-2023-6440

A vulnerability was found in SourceCodester Book Borrower System 1.0 and classified as problematic. This issue affects some unknown processing of the file endpoint/add-book.php. The manipulation of the argument Book Title/Book Author leads to cross site scripting. The attack may be initiated...

5.4CVSS3.8AI score0.00611EPSS
SaveExploits1References3
Prion
Prion
added 2023/11/30 9:15 p.m.24 views

Cross site scripting

A vulnerability was found in SourceCodester Book Borrower System 1.0 and classified as problematic. This issue affects some unknown processing of the file endpoint/add-book.php. The manipulation of the argument Book Title/Book Author leads to cross site scripting. The attack may be initiated...

4CVSS6.5AI score0.00611EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/11/30 8:31 p.m.34 views

CVE-2023-6440 SourceCodester Book Borrower System add-book.php cross site scripting

A vulnerability was found in SourceCodester Book Borrower System 1.0 and classified as problematic. This issue affects some unknown processing of the file endpoint/add-book.php. The manipulation of the argument Book Title/Book Author leads to cross site scripting. The attack may be initiated...

4CVSS5.5AI score0.00611EPSS
SaveExploits1References3
CVE
CVE
added 2023/11/30 8:31 p.m.49 views

CVE-2023-6440

CVE-2023-6440 affects SourceCodester Book Borrower System 1.0. The vulnerability lies in the add-book.php endpoint where manipulating the Book Title/Book Author parameters enables cross-site scripting (XSS). Exploitation is remote and the issue has been publicly disclosed. Mitigation options docu...

5.4CVSS4.4AI score0.00611EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/11/30 12:00 a.m.11 views

Book Borrower System Cross-Site Scripting Vulnerability

Book Borrower System is a book borrowing system by the individual developer Remy Andrade. A cross-site scripting vulnerability exists in Book Borrower System version 1.0, which stems from an incorrect manipulation of the Book Title/Book Author parameter that can lead to cross-site scripting...

5.4CVSS5.8AI score0.00611EPSS
SaveExploits1References3
Rows per page
Query Builder