CVE-2023-7160

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add Engineer Handler. The manipulation of the argument first name/last name with the input alert0 leads to cross site...

Cross site scripting

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add Engineer Handler. The manipulation of the argument first name/last name with the input alert0 leads to cross site...

CVE-2023-7160 SourceCodester Engineers Online Portal Add Engineer cross site scripting

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add Engineer Handler. The manipulation of the argument first name/last name with the input alert0 leads to cross site...

CVE-2023-7160

CVE-2023-7160 affects SourceCodester Engineers Online Portal 1.0, specifically the Add Engineer Handler. The vulnerability arises from handling the first name/last name input, where injected script tags like can trigger cross-site scripting. The issue can be exploited remotely, and the exploit h...

CVE-2023-7160 SourceCodester Engineers Online Portal Add Engineer cross site scripting

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add Engineer Handler. The manipulation of the argument first name/last name with the input alert0 leads to cross site...

CVE-2023-7160: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add Engineer Handler. The manipulation of the argument first name/last name with the input leads to cross site scripting...

Engineers Online Portal Cross-Site Scripting Vulnerability

Engineers Online Portal is open source an online portal . It is developed using PHP, MySQL database, HTML, CSS, Javascript, jQuery, Ajax, Bootstrap and some other libraries. A cross-site scripting vulnerability exists in SourceCodester Engineers Online Portal version 1.0, which stems from the...

PT-2023-32915 · Unknown · Sourcecodester Engineers Online Portal

Name of the Vulnerable Software and Affected Versions: SourceCodester Engineers Online Portal version 1.0 Description: A vulnerability was found in the component Add Engineer Handler of the SourceCodester Engineers Online Portal. The manipulation of the argument first name/last name with the inpu...

Lazarus Group uses KandyKorn macOS malware for crypto theft

By Deeba Ahmed Another day, another malware operation by the infamous Lazarus group targeting blockchain engineers and crypto users. This is a post from HackRead.com Read the original post: Lazarus Group uses KandyKorn macOS malware for crypto theft...

North Korean Hackers Targeting Crypto Experts with KANDYKORN macOS Malware

State-sponsored threat actors from the Democratic People's Republic of Korea DPRK have been found targeting blockchain engineers of an unnamed crypto exchange platform via Discord with a novel macOS malware dubbed KANDYKORN. Elastic Security Labs said the activity, traced back to April 2023,...

CVE-2023-5283

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file teachersignup.php. The manipulation of the argument firstname/lastname leads to sql injection. The attack may be initiated remotely. The...

CVE-2023-5284

A vulnerability classified as critical has been found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file uploadsavestudent.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2023-5283

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file teachersignup.php. The manipulation of the argument firstname/lastname leads to sql injection. The attack may be initiated remotely. The...

CVE-2023-5284

A vulnerability classified as critical has been found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file uploadsavestudent.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to launch the attack remotely. The...

Sql injection

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file teachersignup.php. The manipulation of the argument firstname/lastname leads to sql injection. The attack may be initiated remotely. The...

CVE-2023-5284 SourceCodester Engineers Online Portal upload_save_student.php unrestricted upload

A vulnerability classified as critical has been found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file uploadsavestudent.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2023-5284

SourceCodester Engineers Online Portal 1.0 contains a vulnerability in the upload_save_student.php function where manipulating the uploaded_file parameter enables unrestricted file upload. This remote exploitation can lead to arbitrary code execution as indicated by multiple sources; the vulnerab...

CVE-2023-5282

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file seedmessagestudent.php. The manipulation of the argument teacherid leads to sql injection. The attack can be initiated remotely. The explo...

Sql injection

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as critical. This affects an unknown part of the file removeinboxmessage.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

Sql injection

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file seedmessagestudent.php. The manipulation of the argument teacherid leads to sql injection. The attack can be initiated remotely. The explo...