Lucene search
+L

7230 matches found

NVD
NVD
added 2023/03/17 7:15 a.m.17 views

CVE-2023-1440

A vulnerability, which was classified as critical, was found in SourceCodester Automatic Question Paper Generator System 1.0. Affected is an unknown function of the file users/user/manageuser.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. I...

8.8CVSS7.3AI score0.00782EPSS
SaveExploits1References3
OSV
OSV
added 2023/03/17 7:15 a.m.9 views

CVE-2023-1440

A vulnerability, which was classified as critical, was found in SourceCodester Automatic Question Paper Generator System 1.0. Affected is an unknown function of the file users/user/manageuser.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. I...

8.8CVSS6.5AI score0.00782EPSS
SaveExploits1References3
Prion
Prion
added 2023/03/17 7:15 a.m.22 views

Sql injection

A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/courses/viewcourse.php of the component GET Parameter Handler. The manipulation of the argument i...

6.5CVSS9.7AI score0.00822EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/03/17 6:23 a.m.61 views

CVE-2023-1441

CVE-2023-1441 affects SourceCodester Automatic Question Paper Generator System 1.0, impacting the GET Parameter Handler in admin/courses/view_course.php. The root cause is a vulnerability in the id parameter that enables SQL injection, allowing remote exploitation without user interaction. Multip...

9.8CVSS8.3AI score0.00822EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/03/17 6:23 a.m.40 views

CVE-2023-1441 SourceCodester Automatic Question Paper Generator System GET Parameter view_course.php sql injection

A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/courses/viewcourse.php of the component GET Parameter Handler. The manipulation of the argument i...

6.5CVSS10AI score0.00822EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/03/17 6:21 a.m.35 views

CVE-2023-1440 SourceCodester Automatic Question Paper Generator System GET Parameter manage_user.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Automatic Question Paper Generator System 1.0. Affected is an unknown function of the file users/user/manageuser.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. I...

6.5CVSS9.2AI score0.00782EPSS
SaveExploits1References3
CVE
CVE
added 2023/03/17 6:21 a.m.49 views

CVE-2023-1440

CVE-2023-1440 affects SourceCodester Automatic Question Paper Generator System 1.0, specifically the GET Parameter Handler in the file users/user/manage_user.php. The vulnerability arises from manipulation of the id argument, resulting in SQL injection. It can be exploited remotely, and public di...

8.8CVSS7.8AI score0.00782EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/17 12:00 a.m.10 views

PT-2023-17012 · Sourcecodester · Sourcecodester Automatic Question Paper Generator System

Name of the Vulnerable Software and Affected Versions: SourceCodester Automatic Question Paper Generator System version 1.0 Description: A critical issue was found in the GET Parameter Handler component of the SourceCodester Automatic Question Paper Generator System. The issue affects the file...

9.8CVSS7.1AI score0.00841EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/03/17 12:00 a.m.8 views

SourceCodester Automatic Question Paper Generator System SQL注入漏洞

Automatic Question Paper Generator System is an automatic question paper generator system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Automatic Question Paper Generator System version 1.0, which originates from a SQL injection vulnerability found in...

9.8CVSS7AI score0.00822EPSS
SaveExploits1References4
OSV
OSV
added 2023/03/14 6:05 p.m.8 views

SUSE-SU-2023:0736-1 Security update for python3

This update for python3 fixes the following issues: - CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters bsc1208471. The following non-security bugs were fixed: - Fixed a crash in the garbage collection bsc1188607 - Fixed...

7.5CVSS7.8AI score0.20459EPSS
SaveExploits3References5
NVD
NVD
added 2023/03/14 9:15 a.m.30 views

CVE-2022-47143

Cross-Site Request Forgery CSRF vulnerability in Themeisle Multiple Page Generator Plugin – MPG plugin = 3.3.9 versions...

8.8CVSS5.8AI score0.0026EPSS
SaveExploits0References1
CVE
CVE
added 2023/03/14 8:58 a.m.60 views

CVE-2022-47143

CVE-2022-47143 is a CSRF vulnerability in Themeisle’s MPG Plugin (WordPress) versions

8.8CVSS6.5AI score0.0026EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/14 8:58 a.m.10 views

CVE-2022-47143 WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Themeisle Multiple Page Generator Plugin – MPG plugin = 3.3.9 versions...

4.3CVSS7AI score0.0026EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/03/14 12:00 a.m.19 views

PT-2023-15189 · Themeisle · Themeisle Multiple Page Generator Plugin

Name of the Vulnerable Software and Affected Versions: Themeisle Multiple Page Generator Plugin - MPG plugin versions = 3.3.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

8.8CVSS8.8AI score0.0026EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/03/14 12:00 a.m.14 views

WordPress Plugin Themeisle Multiple Page Generator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Themeisle...

8.8CVSS8.2AI score0.0026EPSS
SaveExploits0References2
NVD
NVD
added 2023/03/13 5:15 p.m.20 views

CVE-2023-0066

The Companion Sitemap Generator WordPress plugin through 4.5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scriptin...

5.4CVSS5.3AI score0.00444EPSS
SaveExploits2References1
OSV
OSV
added 2023/03/13 5:15 p.m.12 views

CVE-2023-0066

The Companion Sitemap Generator WordPress plugin through 4.5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scriptin...

5.4CVSS6.7AI score0.00444EPSS
SaveExploits2References1
Prion
Prion
added 2023/03/13 5:15 p.m.21 views

Cross site scripting

The Companion Sitemap Generator WordPress plugin through 4.5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scriptin...

4.9CVSS5.4AI score0.00444EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2023/03/13 4:03 p.m.32 views

CVE-2023-0066 Companion Sitemap Generator <= 4.5.1.1 - Contributor+ Stored XSS

The Companion Sitemap Generator WordPress plugin through 4.5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scriptin...

5.5AI score0.00444EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2023/03/13 4:03 p.m.9 views

CVE-2023-0066 Companion Sitemap Generator <= 4.5.1.1 - Contributor+ Stored XSS

The Companion Sitemap Generator WordPress plugin through 4.5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scriptin...

5.3AI score0.00444EPSS
SaveExploits2References1
Rows per page
Query Builder