Lucene search
+L

21472 matches found

CVE
CVE
added 2024/08/22 11:31 p.m.74 views

CVE-2024-8089

CVE-2024-8089 affects SourceCodester E-Commerce System v1.0. The vulnerability resides in the unknown function of the file /ecommerce/admin/products/controller.php, where manipulating the photo parameter leads to an unrestricted upload. This enables a remote attacker to upload arbitrary files, wi...

9.8CVSS6.5AI score0.00697EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2024/08/22 11:31 p.m.46 views

CVE-2024-8089 SourceCodester E-Commerce System controller.php unrestricted upload

A vulnerability was found in SourceCodester E-Commerce System 1.0. It has been classified as critical. Affected is an unknown function of the file /ecommerce/admin/products/controller.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack...

6.5CVSS0.00697EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/08/22 11:31 p.m.20 views

CVE-2024-8089 SourceCodester E-Commerce System controller.php unrestricted upload

A vulnerability was found in SourceCodester E-Commerce System 1.0. It has been classified as critical. Affected is an unknown function of the file /ecommerce/admin/products/controller.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack...

6.5CVSS6.9AI score0.00697EPSS
SaveExploits1References5
NVD
NVD
added 2024/08/22 11:15 p.m.31 views

CVE-2024-8086

A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ecommerce/admin/login.php of the component Admin Login. The manipulation of the argument useremail leads to sql injection. The attack can be...

9.8CVSS0.00689EPSS
SaveExploits1References5
NVD
NVD
added 2024/08/22 11:15 p.m.31 views

CVE-2024-8087

A vulnerability was found in SourceCodester E-Commerce System 1.0 and classified as critical. This issue affects some unknown processing of the file /ecommerce/popupItem.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS0.00599EPSS
SaveExploits1References5
OSV
OSV
added 2024/08/22 11:15 p.m.9 views

CVE-2024-8087

A vulnerability was found in SourceCodester E-Commerce System 1.0 and classified as critical. This issue affects some unknown processing of the file /ecommerce/popupItem.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.8AI score0.00599EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/08/22 11:00 p.m.18 views

CVE-2024-8087 SourceCodester E-Commerce System popup_Item.php sql injection

A vulnerability was found in SourceCodester E-Commerce System 1.0 and classified as critical. This issue affects some unknown processing of the file /ecommerce/popupItem.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS7.4AI score0.00599EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/08/22 11:00 p.m.42 views

CVE-2024-8087 SourceCodester E-Commerce System popup_Item.php sql injection

A vulnerability was found in SourceCodester E-Commerce System 1.0 and classified as critical. This issue affects some unknown processing of the file /ecommerce/popupItem.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS0.00599EPSS
SaveExploits1References5
CVE
CVE
added 2024/08/22 11:00 p.m.67 views

CVE-2024-8087

CVE-2024-8087 concerns SourceCodester E-Commerce System 1.0. The issue is an SQL injection in the /ecommerce/popup_Item.php page caused by manipulation of the id argument. A remote attacker could potentially exploit this vulnerability, and public disclosure of exploits is indicated. Affected comp...

9.8CVSS7.4AI score0.00599EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2024/08/22 10:31 p.m.73 views

CVE-2024-8086

SourceCodester E-Commerce System 1.0 Admin Login page (/ecommerce/admin/login.php) is affected by SQL injection via the user_email parameter. The vulnerability enables remote exploitation; multiple sources confirm the issue and public disclosure. Concrete remediation/version details are not provi...

9.8CVSS7.5AI score0.00689EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/22 10:31 p.m.25 views

CVE-2024-8086 SourceCodester E-Commerce System Admin Login login.php sql injection

A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ecommerce/admin/login.php of the component Admin Login. The manipulation of the argument useremail leads to sql injection. The attack can be...

7.5CVSS7.5AI score0.00689EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/08/22 10:31 p.m.50 views

CVE-2024-8086 SourceCodester E-Commerce System Admin Login login.php sql injection

A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ecommerce/admin/login.php of the component Admin Login. The manipulation of the argument useremail leads to sql injection. The attack can be...

7.5CVSS0.00689EPSS
SaveExploits1References5
NVD
NVD
added 2024/08/22 9:15 p.m.31 views

CVE-2023-7260

Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system...

7.5CVSS0.00519EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/22 9:15 p.m.8 views

CVE-2023-7260

Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system...

7.5CVSS5.8AI score0.00519EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/22 8:54 p.m.14 views

CVE-2023-7260 A path traversal vulnerability has been discovered in OpenText™ CX-E Voice.

Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system...

6.9CVSS6.9AI score0.00519EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/22 8:54 p.m.64 views

CVE-2023-7260

OpenText CX-E Voice contains a path traversal vulnerability (affecting all versions through 22.4) that could allow arbitrary access to files on the system. The connected documents indicate the issue is a path traversal flaw but do not provide exploitation details. Mitigation: upgrade to a version...

7.5CVSS6.5AI score0.00519EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/08/22 8:54 p.m.36 views

CVE-2023-7260 A path traversal vulnerability has been discovered in OpenText™ CX-E Voice.

Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system...

6.9CVSS0.00519EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/08/22 12:00 a.m.11 views

PT-2024-38796 · Sourcecodester · Sourcecodester E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester E-Commerce System version 1.0 Description: A critical issue affects the processing of the file /ecommerce/popup Item.php, where the manipulation of the id argument leads to SQL injection. The attack can be initiated remotely. T...

9.8CVSS7.2AI score0.00599EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2024/08/22 12:00 a.m.7 views

SourceCodester E-Commerce System 安全漏洞

SourceCodester E-Commerce System is an e-commerce system from SourceCodester Inc. A security vulnerability exists in the SourceCodester E-Commerce System version 1.0, which originates from an SQL injection vulnerability in the id parameter of the /ecommerce/popupItem.php page...

9.8CVSS7AI score0.00599EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/08/22 12:00 a.m.11 views

PT-2024-38797 · Unknown · Sourcecodester E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester E-Commerce System version 1.0 Description: A critical issue has been found in the SourceCodester E-Commerce System, affecting an unknown function of the file /ecommerce/admin/products/controller.php. The manipulation of the pho...

9.8CVSS6.7AI score0.00697EPSS
SaveExploits1References12
Rows per page
Query Builder