Lucene search
+L

3490 matches found

OSV
OSV
•added 2023/04/28 12:15 p.m.•20 views

CVE-2023-2366

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ajax.php?action=deleteclass. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

9.8CVSS6.6AI score0.00791EPSS
SaveExploits1References3
NVD
NVD
•added 2023/04/28 12:15 p.m.•24 views

CVE-2023-2365

A vulnerability has been found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file ajax.php?action=deletesubject. The manipulation of the argument id leads to sql injection. The attack can be launched...

9.8CVSS7.4AI score0.00737EPSS
SaveExploits1References3
Prion
Prion
•added 2023/04/28 12:15 p.m.•34 views

Sql injection

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ajax.php?action=deleteclass. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

6.5CVSS9.6AI score0.00791EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/04/28 12:00 p.m.•39 views

CVE-2023-2366 SourceCodester Faculty Evaluation System sql injection

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ajax.php?action=deleteclass. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

6.5CVSS9.9AI score0.00791EPSS
SaveExploits1References3
CVE
CVE
•added 2023/04/28 12:00 p.m.•77 views

CVE-2023-2366

CVE-2023-2366 concerns a SQL injection in SourceCodester Faculty Evaluation System 1.0, exploited via the function in file ajax.php?action=delete_class where the attacker can manipulate the id parameter. Multiple sources report remote exploitation with high impact, including potential disclosure ...

9.8CVSS8.2AI score0.00791EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/04/28 11:31 a.m.•36 views

CVE-2023-2365 SourceCodester Faculty Evaluation System sql injection

A vulnerability has been found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file ajax.php?action=deletesubject. The manipulation of the argument id leads to sql injection. The attack can be launched...

6.5CVSS10AI score0.00737EPSS
SaveExploits1References3
CVE
CVE
•added 2023/04/28 11:31 a.m.•62 views

CVE-2023-2365

CVE-2023-2365 affects SourceCodester Faculty Evaluation System 1.0. The vulnerability is a SQL injection in the file ajax.php?action=delete_subject, triggered by manipulating the id argument. Many connected sources confirm remote exploitation and classify the issue as critical/high impact on conf...

9.8CVSS8.3AI score0.00737EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2023/04/28 12:00 a.m.•18 views

PT-2023-19102 · Sourcecodester · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Faculty Evaluation System version 1.0 Description: A critical issue has been found in the SourceCodester Faculty Evaluation System, affecting an unknown functionality of the file "ajax.php?action=delete subject". The manipulati...

9.8CVSS7.8AI score0.00737EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2023/04/28 12:00 a.m.•52 views

PT-2023-19134 · Sourcecodester · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Faculty Evaluation System version 1.0 Description: A critical issue affects the processing of the file admin/manage restriction.php, where the manipulation of the id argument leads to sql injection. The attack can be initiated...

9.8CVSS5.5AI score0.00722EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2023/04/28 12:00 a.m.•18 views

Faculty Evaluation System SQL注入漏洞

Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Faculty Evaluation System version 1.0, which stems from an SQL injection issue in the id parameter of ajax.php?action=deletesubject...

9.8CVSS7.2AI score0.00737EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/04/28 12:00 a.m.•18 views

Faculty Evaluation System SQL注入漏洞

Faculty Evaluation System is a faculty evaluation system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Faculty Evaluation System version 1.0, which stems from an SQL injection problem in the id parameter of index.php?page=managequestionnaire...

9.8CVSS6AI score0.00722EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/04/28 12:00 a.m.•19 views

Faculty Evaluation System SQL注入漏洞

Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Faculty Evaluation System version 1.0, which stems from an SQL injection issue in the id parameter of ajax.php?action=deleteclass...

9.8CVSS7.2AI score0.00791EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•4 views

CVE-2023-2369: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/managerestriction.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The explo...

9.8CVSS5.5AI score0.00722EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•8 views

CVE-2023-2366: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ajax.php?action=deleteclass. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

9.8CVSS5.5AI score0.00791EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•3 views

CVE-2023-2368: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php?page=managequestionnaire. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. Th...

9.8CVSS5.5AI score0.00722EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•3 views

CVE-2023-2367: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/manageacademic.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploi...

9.8CVSS5.5AI score0.00722EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•4 views

CVE-2023-2365: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file ajax.php?action=deletesubject. The manipulation of the argument id leads to sql injection. The attack can be launched...

9.8CVSS5.5AI score0.00737EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/04/28 12:00 a.m.•20 views

PT-2023-19113 · Sourcecodester · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Faculty Evaluation System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /admin/manage academic.php. The manipulation of the id argument leads to sql injection,...

9.8CVSS5.3AI score0.00722EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2023/04/28 12:00 a.m.•20 views

Faculty Evaluation System SQL注入漏洞

Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Faculty Evaluation System version 1.0, which stems from an SQL injection issue in the id parameter of /admin/manageacademic.php...

9.8CVSS6AI score0.00722EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/04/27 12:00 a.m.•12 views

PT-2023-3041

Name of the Vulnerable Software and Affected Versions ReportLab versions up to 3.6.12 Description The issue is related to the rl safe eval function in the ReportLab library, which is associated with incorrect code generation management. This can allow a remote attacker to bypass security...

10CVSS6.2AI score0.02123EPSS
SaveExploits6References60
Rows per page
Query Builder