Lucene search
+L

21491 matches found

Cvelist
Cvelist
added 2023/03/30 7:31 p.m.38 views

CVE-2023-1735 SourceCodester Young Entrepreneur E-Negosyo System passwordrecover.php sql injection

A vulnerability classified as critical was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by this vulnerability is an unknown functionality of the file passwordrecover.php. The manipulation of the argument phonenumber leads to sql injection. The attack can be launched...

6.5CVSS10AI score0.00492EPSS
SaveExploits0References2
CVE
CVE
added 2023/03/30 7:31 p.m.72 views

CVE-2023-1735

CVE-2023-1735 affects SourceCodester Young Entrepreneur E-Negosyo System 1.0. The vulnerability is in the file passwordrecover.php, where manipulating the URL parameter phonenumber leads to a SQL injection. The issue can be exploited remotely and, per the CVE entry, impacts confidentiality, integ...

9.8CVSS8.3AI score0.00492EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/03/30 7:15 p.m.24 views

CVE-2023-1734

A vulnerability classified as critical has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected is an unknown function of the file admin/products/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the...

9.8CVSS7.9AI score0.00623EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/30 7:15 p.m.7 views

CVE-2023-1734

A vulnerability classified as critical has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected is an unknown function of the file admin/products/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the...

9.8CVSS6.8AI score0.00623EPSS
SaveExploits0References2
Prion
Prion
added 2023/03/30 7:15 p.m.22 views

Design/Logic Flaw

A vulnerability classified as critical has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected is an unknown function of the file admin/products/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the...

7.5CVSS9.5AI score0.00623EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/03/30 7:00 p.m.76 views

CVE-2023-1734

SourceCodester Young Entrepreneur E-Negosyo System 1.0 contains a vulnerability where the image parameter in the endpoint admin/products/controller.php?action=add can be manipulated to perform an unrestricted file upload. The issue is exploitable remotely, enabling an attacker to upload arbitrary...

9.8CVSS8.6AI score0.00623EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/03/30 7:00 p.m.38 views

CVE-2023-1734 SourceCodester Young Entrepreneur E-Negosyo System unrestricted upload

A vulnerability classified as critical has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected is an unknown function of the file admin/products/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the...

7.5CVSS9.8AI score0.00623EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2023/03/30 7:41 a.m.9 views

e-myholiday.com Cross Site Scripting vulnerability OBB-3241566

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

5.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/03/30 7:39 a.m.14 views

e-grajewo.pl Cross Site Scripting vulnerability OBB-3241558

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

5.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/03/30 12:00 a.m.11 views

PT-2023-17201 · Sourcecodester · Sourcecodester Young Entrepreneur E-Negosyo System

Name of the Vulnerable Software and Affected Versions: SourceCodester Young Entrepreneur E-Negosyo System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file cart/controller.php?action=add. The manipulation of the PROID argument...

8.8CVSS6.3AI score0.00439EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/03/30 12:00 a.m.11 views

PT-2023-17200 · Sourcecodester · Sourcecodester Young Entrepreneur E-Negosyo System

Name of the Vulnerable Software and Affected Versions: SourceCodester Young Entrepreneur E-Negosyo System version 1.0 Description: A critical vulnerability was found in the SourceCodester Young Entrepreneur E-Negosyo System. The issue affects an unknown functionality of the file...

9.8CVSS8.4AI score0.00492EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/03/30 12:00 a.m.15 views

Young Entrepreneur E-Negosyo System SQL注入漏洞

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in SourceCodester Young Entrepreneur E-Negosyo System version 1.0, which stems from an incorrect manipulation of the parameter phonenumber resulting in sq...

9.8CVSS6.9AI score0.00492EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/30 12:00 a.m.12 views

Young Entrepreneur E-Negosyo System SQL注入漏洞

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in SourceCodester Young Entrepreneur E-Negosyo System version 1.0, which stems from an incorrect manipulation of the parameter search resulting in sql...

9.8CVSS6.9AI score0.00492EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/30 12:00 a.m.9 views

Young Entrepreneur E-Negosyo System 代码问题漏洞

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in version 1.0 of the SourceCodester Young Entrepreneur E-Negosyo System that stems from an incorrect manipulation of the parameter image resulting in...

9.8CVSS7.5AI score0.00623EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/30 12:00 a.m.10 views

Young Entrepreneur E-Negosyo System SQL注入漏洞

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in SourceCodester Young Entrepreneur E-Negosyo System version 1.0, which stems from an incorrect manipulation of the parameter UUSERNAME resulting in sql...

9.8CVSS7.5AI score0.00554EPSS
SaveExploits0References3
NVD
NVD
added 2023/03/29 8:15 p.m.35 views

CVE-2023-22705

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Collne Inc. Welcart e-Commerce plugin = 2.8.10 versions...

7.1CVSS6.2AI score0.00431EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/29 8:15 p.m.25 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Collne Inc. Welcart e-Commerce plugin = 2.8.10 versions...

5.8CVSS6AI score0.00431EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/29 7:32 p.m.10 views

CVE-2023-22705 WordPress Welcart e-Commerce Plugin <= 2.8.10 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Collne Inc. Welcart e-Commerce plugin = 2.8.10 versions...

7.1CVSS5.8AI score0.00431EPSS
SaveExploits0References1
CVE
CVE
added 2023/03/29 7:32 p.m.64 views

CVE-2023-22705

CVE-2023-22705 concerns an unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Welcart e-Commerce by Collne Inc., affecting versions

7.1CVSS6AI score0.00431EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/03/29 7:32 p.m.42 views

CVE-2023-22705 WordPress Welcart e-Commerce Plugin <= 2.8.10 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Collne Inc. Welcart e-Commerce plugin = 2.8.10 versions...

7.1CVSS6.3AI score0.00431EPSS
SaveExploits0References1
Rows per page
Query Builder