Lucene search
K

3490 matches found

Cvelist
Cvelist
added 2024/05/17 1:31 p.m.16 views

CVE-2024-5048 code-projects Budget Management index.php sql injection

A vulnerability classified as critical was found in code-projects Budget Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument edit leads to sql injection. The attack can be launched remotely. The exploit has been...

6.5CVSS6.8AI score0.0025EPSS
Exploits1References4
NVD
NVD
added 2024/05/16 10:15 a.m.12 views

CVE-2024-4973

A vulnerability classified as critical was found in code-projects Simple Chat System 1.0. This vulnerability affects unknown code of the file /register.php. The manipulation of the argument name/number/address leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS6.9AI score0.0025EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/05/16 10:0 a.m.10 views

CVE-2024-4975 code-projects Simple Chat System Message cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Simple Chat System 1.0. This issue affects some unknown processing of the component Message Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

5.3CVSS4.1AI score0.00167EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/05/16 9:31 a.m.20 views

CVE-2024-4974 code-projects Simple Chat System register.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Simple Chat System 1.0. Affected is an unknown function of the file /register.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has be...

5.3CVSS6.2AI score0.00167EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/05/16 9:31 a.m.17 views

CVE-2024-4974 code-projects Simple Chat System register.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Simple Chat System 1.0. Affected is an unknown function of the file /register.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has be...

5.3CVSS4.1AI score0.00167EPSS
Exploits1References4
NVD
NVD
added 2024/05/16 9:15 a.m.13 views

CVE-2024-4972

A vulnerability classified as critical has been found in code-projects Simple Chat System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

9.8CVSS6.8AI score0.00247EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/05/16 9:0 a.m.16 views

CVE-2024-4972 code-projects Simple Chat System login.php sql injection

A vulnerability classified as critical has been found in code-projects Simple Chat System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

6.5CVSS7.4AI score0.00247EPSS
Exploits1References4
CVE
CVE
added 2024/05/16 9:0 a.m.55 views

CVE-2024-4972

The CVE-2024-4972 entry concerns code-projects Simple Chat System 1.0. Affected component: login.php, where manipulating the email/password parameters enables SQL injection. This vulnerability is exploitable remotely, and public disclosures exist. Connected documents identify the affected product...

9.8CVSS7.3AI score0.00247EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/05/16 9:0 a.m.20 views

CVE-2024-4972 code-projects Simple Chat System login.php sql injection

A vulnerability classified as critical has been found in code-projects Simple Chat System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

6.5CVSS7.1AI score0.00247EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/05/16 12:0 a.m.3 views

PT-2024-33660 · Unknown · Code-Projects Simple Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Chat System version 1.0 Description: A problematic issue was found in the code-projects Simple Chat System, affecting an unknown function of the file /register.php. The manipulation of the name argument leads to cross-sit...

6.1CVSS6.6AI score0.00167EPSS
Exploits1References8
OSV
OSV
added 2024/05/15 3:15 p.m.1 views

CVE-2024-34954

Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting XSS via the budget parameter...

6.1CVSS5.8AI score0.00382EPSS
Exploits1References1
NVD
NVD
added 2024/05/15 3:15 p.m.7 views

CVE-2024-34954

Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting XSS via the budget parameter...

6.1CVSS5.8AI score0.00382EPSS
Exploits1References1
NVD
NVD
added 2024/05/15 3:15 p.m.12 views

CVE-2024-34955

Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter...

9.8CVSS7.7AI score0.00131EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/05/15 2:13 p.m.12 views

CVE-2024-34955

Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter...

8AI score0.00131EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/05/15 2:13 p.m.19 views

CVE-2024-34955

Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter...

8.1AI score0.00131EPSS
Exploits1References1
CVE
CVE
added 2024/05/15 2:13 p.m.30 views

CVE-2024-34955

CVE-2024-34955 affects Code-projects Budget Management 1.0. The vulnerability is SQL Injection via the delete parameter in the application, with a CVSS v3.1 base score of 9.8 (Critical); impact on confidentiality, integrity, and availability is High. Exploitation is possible without authenticatio...

9.8CVSS8.1AI score0.00131EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2024/05/15 2:11 p.m.40 views

CVE-2024-34954

CVE-2024-34954 affects Code-projects Budget Management 1.0. The vulnerability is Cross Site Scripting (XSS) exploitable via the budget parameter. According to the CVE, the base CVSS v3.1 score is 6.1 (Medium): Network attack vector, no privileges, user interaction required, with confidentiality/i...

6.1CVSS6AI score0.00382EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/15 2:11 p.m.11 views

CVE-2024-34954

Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting XSS via the budget parameter...

6AI score0.00382EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/05/15 12:0 a.m.3 views

PT-2024-26269 · Unknown · Code-Projects Budget Management

Name of the Vulnerable Software and Affected Versions: Code-projects Budget Management version 1.0 Description: The issue concerns Cross Site Scripting XSS via the budget parameter. This allows for potential malicious script injection, affecting the security of the application. Recommendations: F...

6.1CVSS6.2AI score0.00382EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/05/15 12:0 a.m.3 views

PT-2024-26270 · Unknown · Code-Projects Budget Management

Name of the Vulnerable Software and Affected Versions: Code-projects Budget Management version 1.0 Description: The issue is related to SQL Injection, which occurs via the delete parameter. This allows for potential manipulation of database queries. Recommendations: For Code-projects Budget...

9.8CVSS7.8AI score0.00131EPSS
Exploits1References3
Rows per page
Query Builder