Lucene search
+L

1885 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/26 12:00 a.m.•3 views

CVE-2024-11674: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in CodeAstro Hospital Management System 1.0. Affected is an unknown function of the file /backend/doc/hisdocupdate-account.php. The manipulation of the argument docdpic leads to unrestricted upload. It is possible to launch the attack...

8.8CVSS6.3AI score0.00614EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/11/25 11:31 p.m.•44 views

CVE-2024-11674 CodeAstro Hospital Management System his_doc_update-account.php unrestricted upload

A vulnerability, which was classified as critical, was found in CodeAstro Hospital Management System 1.0. Affected is an unknown function of the file /backend/doc/hisdocupdate-account.php. The manipulation of the argument docdpic leads to unrestricted upload. It is possible to launch the attack...

6.5CVSS0.00614EPSS
SaveExploits1References5
CVE
CVE
•added 2024/11/25 11:31 p.m.•69 views

CVE-2024-11674

CodeAstro Hospital Management System 1.0 is affected by CVE-2024-11674 due to an unrestricted file upload in the /backend/doc/his_doc_update-account.php function when manipulating the doc_dpic parameter. The vulnerability can be triggered remotely, and public exploitation details have been disclo...

8.8CVSS6.5AI score0.00614EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/25 11:31 p.m.•15 views

CVE-2024-11674 CodeAstro Hospital Management System his_doc_update-account.php unrestricted upload

A vulnerability, which was classified as critical, was found in CodeAstro Hospital Management System 1.0. Affected is an unknown function of the file /backend/doc/hisdocupdate-account.php. The manipulation of the argument docdpic leads to unrestricted upload. It is possible to launch the attack...

6.5CVSS6.9AI score0.00614EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/11/25 12:00 a.m.•18 views

CodeAstro Hospital Management System 安全漏洞

CodeAstro Hospital Management System is a hospital management system from CodeAstro, Inc. A security vulnerability exists in CodeAstro Hospital Management System version 1.0, which originates from an unrestricted file upload issue contained in the docdpic parameter of the...

8.8CVSS6.6AI score0.00614EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/25 12:00 a.m.•22 views

PT-2024-17183 · Codeastro · Codeastro Hospital Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Hospital Management System version 1.0 Description: A vulnerability has been found in the CodeAstro Hospital Management System, affecting an unknown functionality of the file /backend/admin/his admin register patient.php of the...

5.4CVSS4.2AI score0.00485EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2024/11/25 12:00 a.m.•3 views

PT-2024-17182

Name of the Vulnerable Software and Affected Versions CodeAstro Hospital Management System version 1.0 Description A critical issue was found in the CodeAstro Hospital Management System, affecting an unknown function of the file /backend/doc/his doc update-account.php. The manipulation of the doc...

8.8CVSS0.00614EPSS
SaveExploits1References10
OSV
OSV
•added 2024/11/10 11:15 p.m.•16 views

CVE-2024-11058

A vulnerability was found in CodeAstro Real Estate Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /aboutedit.php of the component About Us Page. The manipulation of the argument id leads to sql injection. The attack can be...

7.2CVSS5.7AI score0.00522EPSS
SaveExploits1References5
NVD
NVD
•added 2024/11/10 11:15 p.m.•62 views

CVE-2024-11058

A vulnerability was found in CodeAstro Real Estate Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /aboutedit.php of the component About Us Page. The manipulation of the argument id leads to sql injection. The attack can be...

7.2CVSS0.00522EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/11/10 11:00 p.m.•52 views

CVE-2024-11058 CodeAstro Real Estate Management System About Us Page aboutedit.php sql injection

A vulnerability was found in CodeAstro Real Estate Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /aboutedit.php of the component About Us Page. The manipulation of the argument id leads to sql injection. The attack can be...

5.8CVSS0.00522EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/11/10 11:00 p.m.•18 views

CVE-2024-11058 CodeAstro Real Estate Management System About Us Page aboutedit.php sql injection

A vulnerability was found in CodeAstro Real Estate Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /aboutedit.php of the component About Us Page. The manipulation of the argument id leads to sql injection. The attack can be...

5.8CVSS5.4AI score0.00522EPSS
SaveExploits1References5
CVE
CVE
•added 2024/11/10 11:00 p.m.•75 views

CVE-2024-11058

CVE-2024-11058 affects CodeAstro Real Estate Management System up to version 1.0. The vulnerability is an SQL injection in the About Us Page component, caused by improper handling of the id parameter in the /aboutedit.php file. It can be exploited remotely and, per public disclosures, an exploit ...

7.2CVSS5.6AI score0.00522EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2024/11/10 12:00 a.m.•14 views

CodeAstro Real Estate Management System 注入漏洞

CodeAstro Real Estate Management System is a real estate management system from CodeAstro. An injection vulnerability exists in CodeAstro Real Estate Management System version 1.0 and earlier, which stems from a parameter id in the file /aboutedit.php that can lead to SQL injection...

7.2CVSS5.8AI score0.00522EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/10 12:00 a.m.•4 views

CVE-2024-11058: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in CodeAstro Real Estate Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /aboutedit.php of the component About Us Page. The manipulation of the argument id leads to sql injection. The attack can be...

7.2CVSS5.1AI score0.00522EPSS
SaveExploits1References1
NVD
NVD
•added 2024/11/08 8:15 a.m.•28 views

CVE-2024-11000

A vulnerability classified as problematic was found in CodeAstro Real Estate Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /aboutedit.php of the component About Us Page. The manipulation of the argument aimage leads to unrestricted upload. The attac...

7.2CVSS0.00581EPSS
SaveExploits1References5
OSV
OSV
•added 2024/11/08 8:15 a.m.•16 views

CVE-2024-10999

A vulnerability classified as problematic has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /aboutadd.php of the component About Us Page. The manipulation of the argument aimage leads to unrestricted upload. It is possible to launch the...

7.2CVSS5AI score0.00581EPSS
SaveExploits1References4
NVD
NVD
•added 2024/11/08 8:15 a.m.•60 views

CVE-2024-10999

A vulnerability classified as problematic has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /aboutadd.php of the component About Us Page. The manipulation of the argument aimage leads to unrestricted upload. It is possible to launch the...

7.2CVSS0.00581EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/11/08 8:00 a.m.•43 views

CVE-2024-11000 CodeAstro Real Estate Management System About Us Page aboutedit.php unrestricted upload

A vulnerability classified as problematic was found in CodeAstro Real Estate Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /aboutedit.php of the component About Us Page. The manipulation of the argument aimage leads to unrestricted upload. The attac...

5.8CVSS0.00581EPSS
SaveExploits1References5
CVE
CVE
•added 2024/11/08 8:00 a.m.•68 views

CVE-2024-11000

CVE-2024-11000 affects CodeAstro Real Estate Management System 1.0, where the argument aimage in /aboutedit.php enables unrestricted file upload. The vulnerability targets an unknown functionality, can be exploited remotely, and public disclosure exists. Connected sources consistently describe an...

7.2CVSS5.2AI score0.00581EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/08 8:00 a.m.•17 views

CVE-2024-11000 CodeAstro Real Estate Management System About Us Page aboutedit.php unrestricted upload

A vulnerability classified as problematic was found in CodeAstro Real Estate Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /aboutedit.php of the component About Us Page. The manipulation of the argument aimage leads to unrestricted upload. The attac...

5.8CVSS4.9AI score0.00581EPSS
SaveExploits1References5
Rows per page
Query Builder