Lucene search
+L

11996 matches found

Positive Technologies
Positive Technologies
•added 2023/12/28 12:00 a.m.•15 views

PT-2023-8288 · Sourcecodester · Sourcecodester Free/Open Source Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Free and Open Source Inventory Management System version 1.0 Description: The issue is related to the lack of protection against SQL query structure exploitation in the /ample/app/action/edit product.php file of the Free and Op...

9CVSS7.2AI score0.00634EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2023/12/27 12:00 a.m.•14 views

PT-2023-11750 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4.0 Description: A Cross-Site Scripting XSS vulnerability was discovered in the Hospital Management System, allowing an attacker to execute arbitrary web scripts or HTML code via a malicious payload appended...

6.1CVSS6AI score0.00503EPSS
SaveExploits3References5
OSV
OSV
•added 2023/12/21 3:15 p.m.•12 views

CVE-2023-47527

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sajjad Hossain Sagor WP Edit Username allows Stored XSS.This issue affects WP Edit Username: from n/a through 1.0.5...

5.4CVSS7.3AI score0.00291EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/21 3:15 p.m.•38 views

CVE-2023-47527

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sajjad Hossain Sagor WP Edit Username allows Stored XSS.This issue affects WP Edit Username: from n/a through 1.0.5...

5.9CVSS0.00291EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/21 3:15 p.m.•27 views

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sajjad Hossain Sagor WP Edit Username allows Stored XSS.This issue affects WP Edit Username: from n/a through 1.0.5...

4.9CVSS6.9AI score0.00291EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/21 2:27 p.m.•75 views

CVE-2023-47527

CVE-2023-47527 involves the WP Edit Username WordPress plugin and is a stored cross-site scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Affected versions are listed as from n/a through 1.0.5. The connected Red Hat CVE record (RH:CVE-2023-47527) c...

5.9CVSS6.7AI score0.00291EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/12/21 12:00 a.m.•11 views

WordPress plugin WP Edit Username Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

5.9CVSS6.2AI score0.00291EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/21 12:00 a.m.•15 views

PT-2023-30486 · WordPress · Wp Edit Username

Name of the Vulnerable Software and Affected Versions: WP Edit Username versions 1.0.0 through 1.0.5 Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it is a Stored XSS...

5.9CVSS6AI score0.00291EPSS
SaveExploits0References4
OSV
OSV
•added 2023/12/20 7:15 p.m.•14 views

CVE-2023-47990

SQL Injection vulnerability in components/tablemanager/html/editadmintable.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter...

9.8CVSS6AI score0.0078EPSS
SaveExploits1References1
NVD
NVD
•added 2023/12/20 7:15 p.m.•35 views

CVE-2023-47990

SQL Injection vulnerability in components/tablemanager/html/editadmintable.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter...

9.8CVSS0.0078EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/12/20 7:15 p.m.•8 views

CVE-2023-47990

SQL Injection vulnerability in components/tablemanager/html/editadmintable.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter...

9.8CVSS6.1AI score0.0078EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/12/20 12:00 a.m.•16 views

CVE-2023-47990

SQL Injection vulnerability in components/tablemanager/html/editadmintable.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter...

9.9AI score0.0078EPSS
SaveExploits1References1
OSV
OSV
•added 2023/12/19 11:15 a.m.•11 views

CVE-2023-6945

A vulnerability has been found in SourceCodester Online Student Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file edit-student-detail.php. The manipulation of the argument notmsg leads to cross site scripting. The attack ca...

4.8CVSS3.8AI score0.00637EPSS
SaveExploits1References3
Prion
Prion
•added 2023/12/19 11:15 a.m.•27 views

Cross site scripting

A vulnerability has been found in SourceCodester Online Student Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file edit-student-detail.php. The manipulation of the argument notmsg leads to cross site scripting. The attack ca...

3.3CVSS6.5AI score0.00637EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/12/19 10:57 a.m.•45 views

CVE-2023-6945 SourceCodester Online Student Management System edit-student-detail.php cross site scripting

A vulnerability has been found in SourceCodester Online Student Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file edit-student-detail.php. The manipulation of the argument notmsg leads to cross site scripting. The attack ca...

3.3CVSS5.2AI score0.00637EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/12/19 10:57 a.m.•25 views

CVE-2023-6945 SourceCodester Online Student Management System edit-student-detail.php cross site scripting

A vulnerability has been found in SourceCodester Online Student Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file edit-student-detail.php. The manipulation of the argument notmsg leads to cross site scripting. The attack ca...

3.3CVSS6.2AI score0.00637EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/12/19 12:00 a.m.•10 views

SourceCodester Student Management System Cross-Site Scripting Vulnerability

SourceCodester Student Management System is a set of online student management system from SourceCodester, Inc. in the United States. The system provides student information management, announcement management, course management and other functions. A cross-site scripting vulnerability exists in...

4.8CVSS6.1AI score0.00637EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/12/19 12:00 a.m.•31 views

PT-2023-32826 · Unknown · Sourcecodester Online Student Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student Management System version 1.0 Description: A vulnerability has been found in the SourceCodester Online Student Management System, classified as problematic. The issue affects an unknown functionality of the file...

4.8CVSS6.7AI score0.00637EPSS
SaveExploits1References8
Patchstack
Patchstack
•added 2023/12/19 12:00 a.m.•13 views

WordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Software WP Edit Username Type Plugin Vulnerable versions = 1.0.5 Fixed in 1.0.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47527 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3874545cb784 Credits Jeongwoo-LeeRoronoa Required privileg...

5.9CVSS6.6AI score0.00291EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2023/12/01 3:15 p.m.•15 views

CVE-2023-49371

RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit...

9.8CVSS5.8AI score0.03655EPSS
SaveExploits1References3
Rows per page
Query Builder