Lucene search
+L

30 matches found

Vulnrichment
Vulnrichment
•added 2024/02/26 1:00 a.m.•24 views

CVE-2024-1877 SourceCodester Employee Management System cancel.php sql injection

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /cancel.php. The manipulation of the argument id with the input 1%20or%201=1 leads to sql injection. The attack can ...

6.5CVSS6.9AI score0.00628EPSS
SaveExploits0References3
CVE
CVE
•added 2024/02/26 1:00 a.m.•167 views

CVE-2024-1877

CVE-2024-1877 affects SourceCodester Employee Management System 1.0. The vulnerability resides in the unknown-functionality of /cancel.php where the id parameter is improperly handled, allowing SQL injection when crafted input such as 1%20or%201=1 is supplied. The issue can be exploited remotely ...

8.8CVSS6.8AI score0.00628EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/02/26 1:00 a.m.•55 views

CVE-2024-1877 SourceCodester Employee Management System cancel.php sql injection

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /cancel.php. The manipulation of the argument id with the input 1%20or%201=1 leads to sql injection. The attack can ...

6.5CVSS7AI score0.00628EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/26 12:00 a.m.•5 views

CVE-2024-1877: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /cancel.php. The manipulation of the argument id with the input 1%20or%201=1 leads to sql injection. The attack can ...

8.8CVSS5.5AI score0.00628EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/25 12:00 a.m.•17 views

PT-2024-18385 · Unknown · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System version 1.0 Description: A critical issue was found in the SourceCodester Employee Management System, affecting an unknown functionality of the file /cancel.php. The manipulation of the id argument wi...

8.8CVSS8.1AI score0.00628EPSS
SaveExploits0References8
OSV
OSV
•added 2023/11/13 11:15 p.m.•15 views

CVE-2023-46021

SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter...

5.5CVSS6AI score0.00349EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2023/11/13 12:00 a.m.•16 views

PT-2023-29803 · Unknown · Code-Projects Blood Bank

Name of the Vulnerable Software and Affected Versions: Code-Projects Blood Bank version 1.0 Description: The issue allows attackers to execute arbitrary commands via the reqid parameter in the cancel.php file. This can be exploited to run unauthorized commands. Recommendations: For Code-Projects...

5.5CVSS5.9AI score0.00349EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
•added 2023/11/13 12:00 a.m.•21 views

CVE-2023-46021

SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter...

8.6AI score0.00349EPSS
SaveExploits2References1
CVE
CVE
•added 2023/11/13 12:00 a.m.•61 views

CVE-2023-46021

Code-Projects Blood Bank v1.0 is affected by a SQL Injection in cancel.php via the reqid parameter. The root cause is insufficient input validation, enabling an attacker to execute arbitrary commands (local attack; high confidentiality impact; no integrity/availability impact reported). Public re...

5.5CVSS6.3AI score0.00349EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/13 12:00 a.m.•4 views

CVE-2023-46021: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter...

5.5CVSS6.1AI score0.00349EPSS
SaveExploits2References2
Rows per page
Query Builder