415 matches found
CVE-2021-42666: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to quizquestion.php, which could let a malicious user extract sensitive data from the web server and in some cases use this vulnerability in order to get a remote code execution on the remot...
Exploit for Forced Browsing in Engineers_Online_Portal_Project Engineers_Online_Portal
CVE-2021-42671 CVE-2021-42671 - Broken access control vulnerab...
Exploit for SQL Injection in Engineers_Online_Portal_Project Engineers_Online_Portal
CVE-2021-42670 CVE-2021-42670 - SQL Injection vulnerability in...
Exploit for SQL Injection in Engineers_Online_Portal_Project Engineers_Online_Portal
CVE-2021-42670 CVE-2021-42670 - SQL Injection vulnerability in...
Exploit for Unrestricted Upload of File with Dangerous Type in Engineers_Online_Portal_Project Engineers_Online_Portal
CVE-2021-42669 CVE-2021-42669 - Remote code execution via unre...
Exploit for Unrestricted Upload of File with Dangerous Type in Engineers_Online_Portal_Project Engineers_Online_Portal
CVE-2021-42669 CVE-2021-42669 - Remote code execution via unre...
Exploit for SQL Injection in Engineers_Online_Portal_Project Engineers_Online_Portal
cve-2021-42668 CVE-2021-42668 - SQL Injection vulnerability in...
Exploit for SQL Injection in Engineers_Online_Portal_Project Engineers_Online_Portal
cve-2021-42668 CVE-2021-42668 - SQL Injection vulnerability in...
Exploit for SQL Injection in Engineers_Online_Portal_Project Engineers_Online_Portal
CVE-2021-42666 CVE-2021-42666 - SQL Injection vulnerability in...
Exploit for SQL Injection in Engineers_Online_Portal_Project Engineers_Online_Portal
CVE-2021-42666 CVE-2021-42666 - SQL Injection vulnerability in...
Exploit for SQL Injection in Engineers_Online_Portal_Project Engineers_Online_Portal
CVE-2021-42665 CVE-2021-42665 - SQL Injection authentication b...
Exploit for SQL Injection in Engineers_Online_Portal_Project Engineers_Online_Portal
CVE-2021-42665 CVE-2021-42665 - SQL Injection authentication b...
Exploit for Cross-site Scripting in Engineers_Online_Portal_Project Engineers_Online_Portal
CVE-2021-42664 CVE-2021-42664 - Stored Cross-Site Scripting vu...
Exploit for Cross-site Scripting in Engineers_Online_Portal_Project Engineers_Online_Portal
CVE-2021-42664 CVE-2021-42664 - Stored Cross-Site Scripting vu...
Engineers Online Portal 1.0 Cross Site Scripting
Exploit Title: Engineers Online Portal 1.0 - 'multiple' Stored Cross-Site Scripting XSS Exploit Author: Alon Leviev Date: 22-10-2021 Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html Software Link:...
Engineers Online Portal 1.0 - (id) SQL Injection Vulnerability
Exploit Title: Engineers Online Portal 1.0 - 'id' SQL Injection Exploit Author: Alon Leviev Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html Software Link:...
Engineers Online Portal 1.0 SQL Injection
Exploit Title: Engineers Online Portal 1.0 - 'multiple' Authentication Bypass Exploit Author: Alon Leviev Date: 22-10-2021 Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html Software Link:...
Engineers Online Portal 1.0 - (multiple) Stored Cross-Site Scripting Vulnerability
Exploit Title: Engineers Online Portal 1.0 - 'multiple' Stored Cross-Site Scripting XSS Exploit Author: Alon Leviev Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html Software Link:...
Engineers Online Portal 1.0 - (multiple) Authentication Bypass Vulnerability
Exploit Title: Engineers Online Portal 1.0 - 'multiple' Authentication Bypass Exploit Author: Alon Leviev Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html Software Link:...
Engineers Online Portal 1.0 - 'id' SQL Injection
Exploit Title: Engineers Online Portal 1.0 - 'id' SQL Injection Exploit Author: Alon Leviev Date: 22-10-2021 Category: Web application Vendor Homepage: https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html Software Link:...