368 matches found
CVE-2021-42666
A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to quizquestion.php, which could let a malicious user extract sensitive data from the web server and in some cases use this vulnerability in order to get a remote code execution on the remot...
CVE-2021-42666
Sourcecodester Engineers Online Portal (PHP) is affected by CVE-2021-42666 due to an SQL injection in the id parameter of quiz_question.php. The vulnerability allows an attacker to extract sensitive data from the web server, and in some cases may lead to remote code execution on the server. Publi...
CVE-2021-42665
CVE-2021-42665 affects the Sourcecodester Engineers Online Portal (PHP) via the login.php form. The vulnerability is an SQL Injection in the authentication routine that can allow bypassing login without valid credentials. Affected component is the login mechanism (username/password fields), with ...
CVE-2021-42665
An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication...
CVE-2021-42664
A Stored Cross Site Scripting XSS Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the 1 Quiz title and 2 quiz description parameters to addquiz.php. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which c...
CVE-2021-42664
The CVE-2021-42664 entry corresponds to a stored XSS in Sourcecodester Engineers Online Portal (PHP). Affected page: add_quiz.php with vulnerable inputs quiz_title and quiz_description (description parameters). Exploitation allows injected JavaScript to execute in victims’ browsers, potentially e...
Engineers Online Portal SQL注入漏洞
Sourcecodester Engineers Online Portal is an open source online portal. Sourcecodester Engineers Online Portal in PHP is vulnerable to SQL injection, which can be exploited by attackers to extract sensitive data from the web server via the announcesstudent.php id parameter of announcesstudent.php...
Engineers Online Portal 跨站脚本漏洞
Sourcecodester Engineers Online Portal is an open source online portal. sourcecodester Engineers Online Portal in PHP is vulnerable to a cross-site scripting vulnerability. An attacker can exploit the vulnerability to run javascript commands via the addquiz.php quiz title and quiz description...
Engineers Online Portal SQL注入漏洞
Sourcecodester Engineers Online Portal is an open source online portal. sourcecodester Engineers Online Portal in PHP is vulnerable to SQL injection. An attacker can exploit the vulnerability to extract sensitive data from the web server via the id parameter of quizquestion.php and, in some cases...
Engineers Online Portal SQL注入漏洞
Sourcecodester Engineers Online Portal is an open source online portal. Sourcecodester Engineers Online Portal in PHP is vulnerable to SQL injection, which can be exploited by attackers to bypass authentication via the login form in index.php...
Engineers Online Portal 访问控制错误漏洞
Sourcecodester Engineers Online Portal is an open source online portal. niamunozmonitoringsystem/admin/uploads of Sourcecodester Engineers Online Portal in PHP is vulnerable to An access control error vulnerability can be exploited to bypass access control and access all files uploaded to the web...
Engineers Online Portal SQL注入漏洞
Sourcecodester Engineers Online Portal is an open source online portal. sourcecodester Engineers Online Portal in PHP is vulnerable to SQL injection, which can be exploited by attackers to extract sensitive data from the Web server via the id parameter of myclassmates.php, and in some cases...
Exploit for Forced Browsing in Engineers_Online_Portal_Project Engineers_Online_Portal
CVE-2021-42671 CVE-2021-42671 - Broken access control vulnerab...
Exploit for SQL Injection in Engineers_Online_Portal_Project Engineers_Online_Portal
CVE-2021-42670 CVE-2021-42670 - SQL Injection vulnerability in...
Exploit for SQL Injection in Engineers_Online_Portal_Project Engineers_Online_Portal
CVE-2021-42670 CVE-2021-42670 - SQL Injection vulnerability in...
Exploit for Unrestricted Upload of File with Dangerous Type in Engineers_Online_Portal_Project Engineers_Online_Portal
CVE-2021-42669 CVE-2021-42669 - Remote code execution via unre...
Exploit for Unrestricted Upload of File with Dangerous Type in Engineers_Online_Portal_Project Engineers_Online_Portal
CVE-2021-42669 CVE-2021-42669 - Remote code execution via unre...
Exploit for SQL Injection in Engineers_Online_Portal_Project Engineers_Online_Portal
cve-2021-42668 CVE-2021-42668 - SQL Injection vulnerability in...