Lucene search
+L

264 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/05 12:00 a.m.•1 views

CVE-2024-3356: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin/modsettings/controller.php?action=add. The manipulation of the argument type leads to sql injection...

9.8CVSS5.5AI score0.00897EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/05 12:00 a.m.•3 views

CVE-2024-3355: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin/modusers/controller.php?action=add. The manipulation of the argument name leads to sql...

9.8CVSS5.5AI score0.00897EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/03/20 9:31 a.m.•16 views

CVE-2024-2686 Campcodes Online Job Finder System controller.php cross site scripting

A vulnerability has been found in Campcodes Online Job Finder System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/applicants/controller.php. The manipulation of the argument JOBREGID leads to cross site scripting. The attack can be initiated...

4CVSS3.9AI score0.00595EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/03/20 8:00 a.m.•26 views

CVE-2024-2682 Campcodes Online Job Finder System controller.php cross site scripting

A vulnerability classified as problematic has been found in Campcodes Online Job Finder System 1.0. Affected is an unknown function of the file /admin/employee/controller.php. The manipulation of the argument EMPLOYEEID leads to cross site scripting. It is possible to launch the attack remotely...

4CVSS6.2AI score0.00595EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/03/20 8:00 a.m.•39 views

CVE-2024-2682 Campcodes Online Job Finder System controller.php cross site scripting

A vulnerability classified as problematic has been found in Campcodes Online Job Finder System 1.0. Affected is an unknown function of the file /admin/employee/controller.php. The manipulation of the argument EMPLOYEEID leads to cross site scripting. It is possible to launch the attack remotely...

4CVSS4.1AI score0.00595EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/03/20 6:00 a.m.•35 views

CVE-2024-2676 Campcodes Online Job Finder System controller.php sql injection

A vulnerability, which was classified as critical, was found in Campcodes Online Job Finder System 1.0. Affected is an unknown function of the file /admin/company/controller.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

6.5CVSS7.1AI score0.00533EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/03/20 6:00 a.m.•22 views

CVE-2024-2676 Campcodes Online Job Finder System controller.php sql injection

A vulnerability, which was classified as critical, was found in Campcodes Online Job Finder System 1.0. Affected is an unknown function of the file /admin/company/controller.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

6.5CVSS7.4AI score0.00533EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/03/20 4:31 a.m.•17 views

CVE-2024-2672 Campcodes Online Job Finder System controller.php sql injection

A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/user/controller.php. The manipulation of the argument UESRID leads to sql injection. The attack may be launched remotely. The...

6.5CVSS7.3AI score0.00601EPSS
SaveExploits1References3
CVE
CVE
•added 2024/03/20 4:31 a.m.•84 views

CVE-2024-2672

CVE-2024-2672 affects Campcodes Online Job Finder System 1.0. The Red Hat and vendor records confirm a SQL injection vulnerability in the /admin/user/controller.php file, triggered by manipulating the UESRID parameter. The issue is exploitable remotely and, per disclosures, the exploit is public....

6.5CVSS6.8AI score0.00601EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2024/03/20 4:31 a.m.•79 views

CVE-2024-2672 Campcodes Online Job Finder System controller.php sql injection

A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/user/controller.php. The manipulation of the argument UESRID leads to sql injection. The attack may be launched remotely. The...

6.5CVSS7AI score0.00601EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/03/20 2:00 a.m.•40 views

CVE-2024-2668 Campcodes Online Job Finder System controller.php sql injection

A vulnerability has been found in Campcodes Online Job Finder System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/vacancy/controller.php. The manipulation of the argument id/CATEGORY leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS7.1AI score0.00601EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•2 views

CVE-2024-2668: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Online Job Finder System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/vacancy/controller.php. The manipulation of the argument id/CATEGORY leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS5.5AI score0.00601EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•3 views

CVE-2024-2676: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Campcodes Online Job Finder System 1.0. Affected is an unknown function of the file /admin/company/controller.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

6.5CVSS5.5AI score0.00533EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•1 views

CVE-2024-2682: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Campcodes Online Job Finder System 1.0. Affected is an unknown function of the file /admin/employee/controller.php. The manipulation of the argument EMPLOYEEID leads to cross site scripting. It is possible to launch the attack remotely...

6.1CVSS4AI score0.00595EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•3 views

CVE-2024-2677: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Online Job Finder System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/category/controller.php. The manipulation of the argument CATEGORYID leads to sql injection. The attack can be launche...

6.5CVSS5.5AI score0.00496EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•3 views

CVE-2024-2672: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/user/controller.php. The manipulation of the argument UESRID leads to sql injection. The attack may be launched remotely. The...

6.5CVSS5.5AI score0.00601EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•4 views

CVE-2024-2686: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Campcodes Online Job Finder System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/applicants/controller.php. The manipulation of the argument JOBREGID leads to cross site scripting. The attack can be initiated...

6.1CVSS3.8AI score0.00595EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•2 views

CVE-2024-2678: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Job Finder System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/applicants/controller.php. The manipulation of the argument JOBREGID leads to sql injection. The attack may be launched remotely...

6.5CVSS5.5AI score0.00496EPSS
SaveExploits1References2
NVD
NVD
•added 2024/02/27 1:15 a.m.•21 views

CVE-2024-25166

Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary code via the uploadfile action parameter in the controller.php file...

6.1CVSS7AI score0.00549EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/02/27 12:00 a.m.•35 views

CVE-2024-25166

Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary code via the uploadfile action parameter in the controller.php file...

7.2AI score0.00549EPSS
SaveExploits0References1
Rows per page
Query Builder