Lucene search
+L

8363 matches found

Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•19 views

PT-2025-17171 · Unknown · Ashish Ajani Contact Form Vcard Generator

Name of the Vulnerable Software and Affected Versions: Ashish Ajani Contact Form vCard Generator versions n/a through 2.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means th...

7.1CVSS7.2AI score0.00288EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•9 views

CVE-2025-39521: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ashish Ajani Contact Form vCard Generator contact-form-vcard-generator allows Reflected XSS.This issue affects Contact Form vCard Generator: from n/a through = 2.4...

7.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/16 5:15 p.m.•19 views

CVE-2024-40074

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/SystemSettings.php?f=updatesettings, and the point of vulnerability is in the POST parameter 'shortname'...

4.8CVSS5.8AI score0.00272EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/04/16 5:15 p.m.•19 views

CVE-2024-40072

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index&id=1...

9.8CVSS5.8AI score0.00506EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/16 5:15 p.m.•35 views

CVE-2024-40073

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at idgenerator/admin/?page=generate&template=4...

9.8CVSS0.00506EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/16 5:15 p.m.•39 views

CVE-2024-40072

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index&id=1...

9.8CVSS0.00506EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/16 5:15 p.m.•33 views

CVE-2024-40074

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/SystemSettings.php?f=updatesettings, and the point of vulnerability is in the POST parameter 'shortname'...

4.8CVSS0.00272EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/04/16 5:15 p.m.•17 views

CVE-2024-40073

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at idgenerator/admin/?page=generate&template=4...

9.8CVSS5.8AI score0.00506EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/04/16 5:15 p.m.•15 views

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

5.1CVSS6.1AI score0.00258EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/04/16 5:15 p.m.•18 views

CVE-2024-40071

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS6.1AI score0.00778EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/04/16 5:15 p.m.•23 views

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/Users.php?f=save, and the point of vulnerability is in the POST parameter 'firstname' and 'lastname'...

5.4CVSS5.8AI score0.00278EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/16 5:15 p.m.•35 views

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/Users.php?f=save, and the point of vulnerability is in the POST parameter 'firstname' and 'lastname'...

5.4CVSS0.00278EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/16 5:15 p.m.•27 views

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

5.1CVSS0.00258EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/16 5:15 p.m.•36 views

CVE-2024-40068

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=templates/managetemplate&id=1...

5.9CVSS0.00246EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•7 views

PT-2025-16785

Name of the Vulnerable Software and Affected Versions Sourcecodester Online ID Generator System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/id generator/admin/?page=templates/manage template&id=1"...

5.9CVSS5.9AI score0.00246EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/04/16 12:00 a.m.•15 views

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

5.9AI score0.00258EPSS
SaveExploits1References1
CVE
CVE
•added 2025/04/16 12:00 a.m.•67 views

CVE-2024-40068

The Sourcecodester Online ID Generator System 1.0 is vulnerable to a SQL injection vulnerability. The flaw exists due to the incorrect manipulation of the id parameter at the id_generator/admin/?page=templates/manage_template&id=1 endpoint. This vulnerability allows for unauthorized database inte...

5.9CVSS8.3AI score0.00246EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•13 views

Sourcecodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an online identity generator system from SourceCodester open source. A security vulnerability exists in version 1.0 of the Sourcecodester Online ID Generator System, which stems from allowing the upload of arbitrary files and could lead to the executio...

5.1CVSS7.1AI score0.00258EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•11 views

Sourcecodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an online identity generator system from SourceCodester open source. A security vulnerability exists in the Sourcecodester Online ID Generator System version 1.0, which stems from an incorrect manipulation of the parameter id leading to SQL injection...

5.9CVSS7.4AI score0.00246EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/16 12:00 a.m.•10 views

CVE-2024-40070: Improper Neutralization of Special Elements used in a Command

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

5.1CVSS6.5AI score0.00258EPSS
SaveExploits1References1
Rows per page
Query Builder