Lucene search
K

209 matches found

Nuclei
Nuclei
added yesterday4 views

E-Learning System 1.0 - SQL Injection

E-Learning System 1.0 contains an unauthenticated SQL injection caused by unsanitized input, letting remote attackers execute arbitrary code on the server and gain a reverse shell, exploit requires no authentication. id: CVE-2021-3239 info: name: E-Learning System 1.0 - SQL Injection author:...

9.8CVSS7.8AI score0.38354EPSS
Exploits1References2
NVD
NVD
added 2026/03/23 6:16 a.m.2 views

CVE-2026-4573

A security vulnerability has been detected in SourceCodester Simple E-learning System 1.0. This affects an unknown part of the file /includes/formhandlers/deletepost.php of the component HTTP GET Parameter Handler. The manipulation of the argument postid leads to sql injection. It is possible to...

6.5CVSS0.00042EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/23 5:1 a.m.0 views

CVE-2026-4574

A vulnerability was detected in SourceCodester Simple E-learning System 1.0. This vulnerability affects unknown code of the component User Profile Update Handler. The manipulation of the argument firstName results in sql injection. It is possible to launch the attack remotely. The exploit is now...

6.5CVSS6.5AI score0.00042EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2026/03/23 5:1 a.m.32 views

CVE-2026-4574 SourceCodester Simple E-learning System User Profile Update sql injection

A vulnerability was detected in SourceCodester Simple E-learning System 1.0. This vulnerability affects unknown code of the component User Profile Update Handler. The manipulation of the argument firstName results in sql injection. It is possible to launch the attack remotely. The exploit is now...

6.5CVSS0.00042EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/03/23 5:1 a.m.1 views

CVE-2026-4573 SourceCodester Simple E-learning System HTTP GET Parameter delete_post.php sql injection

A security vulnerability has been detected in SourceCodester Simple E-learning System 1.0. This affects an unknown part of the file /includes/formhandlers/deletepost.php of the component HTTP GET Parameter Handler. The manipulation of the argument postid leads to sql injection. It is possible to...

6.5CVSS6.4AI score0.00042EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/23 5:1 a.m.1 views

CVE-2026-4573

A security vulnerability has been detected in SourceCodester Simple E-learning System 1.0. This affects an unknown part of the file /includes/formhandlers/deletepost.php of the component HTTP GET Parameter Handler. The manipulation of the argument postid leads to sql injection. It is possible to...

6.5CVSS6.4AI score0.00042EPSS
Exploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/23 12:0 a.m.1 views

PT-2026-27051

Name of the Vulnerable Software and Affected Versions SourceCodester Simple E-learning System version 1.0 Description A SQL injection issue exists in the User Profile Update Handler component. The manipulation of the firstName argument can lead to SQL injection. The exploit is publicly available...

6.5CVSS6.5AI score0.00042EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2026/03/23 12:0 a.m.1 views

PT-2026-27050

Name of the Vulnerable Software and Affected Versions SourceCodester Simple E-learning System version 1.0 Description A security issue exists in SourceCodester Simple E-learning System 1.0. The issue is related to SQL injection within the /includes/form handlers/delete post.php file, specifically...

6.5CVSS6.5AI score0.00042EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2026/01/20 1:26 p.m.2 views

CVE-2026-1154

A flaw has been found in SourceCodester E-Learning System 1.0. This impacts an unknown function of the file /admin/modules/lesson/index.php of the component Lesson Module Handler. Executing a manipulation of the argument Title/Description can lead to basic cross site scripting. The attack can be...

5.4CVSS3.5AI score0.00052EPSS
Exploits1References1
EUVD
EUVD
added 2026/01/19 12:32 p.m.3 views

EUVD-2026-3219

A flaw has been found in SourceCodester E-Learning System 1.0. This impacts an unknown function of the file /admin/modules/lesson/index.php of the component Lesson Module Handler. Executing a manipulation of the argument Title/Description can lead to basic cross site scripting. The attack can be...

5.3CVSS3.8AI score0.00052EPSS
Exploits1References7
Cvelist
Cvelist
added 2026/01/19 12:32 p.m.19 views

CVE-2026-1154 SourceCodester E-Learning System Lesson index.php cross site scripting

A flaw has been found in SourceCodester E-Learning System 1.0. This impacts an unknown function of the file /admin/modules/lesson/index.php of the component Lesson Module Handler. Executing a manipulation of the argument Title/Description can lead to basic cross site scripting. The attack can be...

5.3CVSS0.00052EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/01/19 12:32 p.m.3 views

CVE-2026-1154 SourceCodester E-Learning System Lesson index.php cross site scripting

A flaw has been found in SourceCodester E-Learning System 1.0. This impacts an unknown function of the file /admin/modules/lesson/index.php of the component Lesson Module Handler. Executing a manipulation of the argument Title/Description can lead to basic cross site scripting. The attack can be...

5.3CVSS3.8AI score0.00052EPSS
Exploits1References5
CVE
CVE
added 2026/01/19 12:32 p.m.10 views

CVE-2026-1154

The CVE-2026-1154 entry affects SourceCodester E-Learning System 1.0, specifically the /admin/modules/lesson/index.php file in the Lesson Module Handler. Affected vector: manipulation of the Title/Description argument enables basic cross-site scripting. The vulnerability is described as exploitab...

5.4CVSS3.7AI score0.00052EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2026/01/19 12:0 a.m.1 views

SourceCodester E-Learning System security vulnerabilities

The SourceCodester E-Learning System is an open-source e-learning system developed by SourceCodester. Version 1.0 of the SourceCodester E-Learning System contains a security vulnerability. This vulnerability stems from incorrect handling of parameters “Title” and “Description” in the file...

5.4CVSS5.6AI score0.00052EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2026/01/09 9:35 a.m.6 views

CVE-2024-34919

An arbitrary file upload vulnerability in the component \modstudent\controller.php of Pisay Online E-Learning System using PHP/MySQL v1.0 allows attackers to execute arbitrary code via uploading a crafted file...

9.8CVSS7.8AI score0.00209EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-3350

Malware in sbrugna...

7.5CVSS6.2AI score0.07829EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-7102

Malware in sbrugna...

9.8CVSS9.2AI score0.00424EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-4407

Malicious code in bioql PyPI...

6.1CVSS4.9AI score0.0007EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-46359

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00316EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-34748

Malicious code in bioql PyPI...

8.8CVSS8.7AI score0.00245EPSS
Exploits1References2
Rows per page
Query Builder