Lucene search
+L

708 matches found

OSV
OSV
•added 2024/09/20 4:15 p.m.•13 views

CVE-2024-9037

A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.9CVSS5.7AI score0.0062EPSS
SaveExploits1References4
NVD
NVD
•added 2024/09/20 4:15 p.m.•31 views

CVE-2024-9037

A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

7.5CVSS0.0062EPSS
SaveExploits1References4
NVD
NVD
•added 2024/09/20 4:15 p.m.•30 views

CVE-2024-9038

A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. The attac...

9.8CVSS0.00734EPSS
SaveExploits1References4
OSV
OSV
•added 2024/09/20 4:15 p.m.•13 views

CVE-2024-9038

A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. The attac...

9.8CVSS5AI score0.00734EPSS
SaveExploits1References4
CVE
CVE
•added 2024/09/20 4:00 p.m.•99 views

CVE-2024-9038

CVE-2024-9038 affects Codezips Online Shopping Portal 1.0, specifically the insert-product.php functionality. The vulnerability arises from manipulating the productimage1/productimage2/productimage3 parameters, enabling unrestricted file upload. This remote attack has had its exploit disclosed pu...

9.8CVSS5.2AI score0.00734EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/20 4:00 p.m.•20 views

CVE-2024-9038 Codezips Online Shopping Portal insert-product.php unrestricted upload

A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. The attac...

5.3CVSS4.8AI score0.00734EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/09/20 4:00 p.m.•48 views

CVE-2024-9038 Codezips Online Shopping Portal insert-product.php unrestricted upload

A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. The attac...

5.3CVSS0.00734EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/09/20 3:31 p.m.•31 views

CVE-2024-9037 Codezips Internal Marks Calculation index.php sql injection

A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

7.5CVSS0.0062EPSS
SaveExploits1References4
CVE
CVE
•added 2024/09/20 3:31 p.m.•101 views

CVE-2024-9037

CVE-2024-9037 affects Codezips Internal Marks Calculation 1.0. The vulnerability is an SQL injection in an unknown function of the file index.php triggered by manipulating the tid parameter, allowing remote execution of queries. Multiple sources (NVD, Red Hat, CVE list, and others) confirm a crit...

7.5CVSS7.6AI score0.0062EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/20 3:31 p.m.•14 views

CVE-2024-9037 Codezips Internal Marks Calculation index.php sql injection

A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

7.5CVSS7.4AI score0.0062EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/20 12:00 a.m.•3 views

CVE-2024-9037: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

7.5CVSS7AI score0.0062EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/09/20 12:00 a.m.•12 views

Codezips Online Shopping Portal 代码问题漏洞

Codezips Online Shopping Portal is a Codezips open source online store system. A code issue vulnerability exists in Codezips Online Shopping Portal version 1.0 due to an unrestricted upload of parameters productimage1/productimage2/productimage3...

9.8CVSS5.2AI score0.00734EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/20 12:00 a.m.•6 views

CVE-2024-9038: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 leads to unrestricted upload. The attac...

9.8CVSS5.1AI score0.00734EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/09/20 12:00 a.m.•1 views

PT-2024-39381

Name of the Vulnerable Software and Affected Versions Codezips Internal Marks Calculation version 1.0 Description A critical vulnerability has been found in the software, affecting an unknown function of the file index.php. The manipulation of the tid argument leads to SQL injection, allowing for...

7.5CVSS0.0062EPSS
SaveExploits1References13
CNNVD
CNNVD
•added 2024/09/20 12:00 a.m.•15 views

Codezips Internal Marks Calculation SQL注入漏洞

Codezips Internal Marks Calculation is a Codezips open source student portal built with PHP. A SQL injection vulnerability exists in Codezips Internal Marks Calculation version 1.0, which stems from an SQL injection in the parameter tid...

7.5CVSS7.9AI score0.0062EPSS
SaveExploits1References6
NVD
NVD
•added 2024/05/17 2:15 p.m.•35 views

CVE-2024-5049

A vulnerability, which was classified as critical, has been found in Codezips E-Commerce Site 1.0. Affected by this issue is some unknown functionality of the file admin/editproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack may be launched remotely...

8.8CVSS6.4AI score0.00688EPSS
SaveExploits1References4
OSV
OSV
•added 2024/05/17 2:15 p.m.•13 views

CVE-2024-5049

A vulnerability, which was classified as critical, has been found in Codezips E-Commerce Site 1.0. Affected by this issue is some unknown functionality of the file admin/editproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack may be launched remotely...

8.8CVSS6.2AI score0.00688EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/05/17 2:00 p.m.•21 views

CVE-2024-5049 Codezips E-Commerce Site editproduct.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Codezips E-Commerce Site 1.0. Affected by this issue is some unknown functionality of the file admin/editproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack may be launched remotely...

6.5CVSS6.9AI score0.00688EPSS
SaveExploits1References4
CVE
CVE
•added 2024/05/17 2:00 p.m.•72 views

CVE-2024-5049

CVE-2024-5049 affects Codezips E-Commerce Site 1.0. The vulnerability is in admin/editproduct.php where manipulating the profilepic parameter leads to unrestricted file upload, enabling remote abuse. The issue is tied to unknown functionality in the editproduct.php handling of profilepic, enablin...

8.8CVSS6.8AI score0.00688EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/05/17 2:00 p.m.•51 views

CVE-2024-5049 Codezips E-Commerce Site editproduct.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Codezips E-Commerce Site 1.0. Affected by this issue is some unknown functionality of the file admin/editproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack may be launched remotely...

6.5CVSS6.4AI score0.00688EPSS
SaveExploits1References4
Rows per page
Query Builder