Lucene search
+L

355 matches found

CVE
CVE
•added 2023/04/22 4:31 p.m.•75 views

CVE-2023-2244

CVE-2023-2244 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability is a SQL injection in the GET Parameter Handler of the file /admin/orders/update_status.php, caused by manipulation of the id parameter. It can be exploited remotely; exploitation has been disclosed publicly (VDB-2272...

9.8CVSS8.3AI score0.00726EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/22 12:00 a.m.•4 views

CVE-2023-2242: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component GET Parameter Handler. The manipulation of the argument c/s leads to sql injection. The attack can be...

8.8CVSS5.5AI score0.00729EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/04/22 12:00 a.m.•14 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Online Computer and Laptop Store version 1.0, which stems from a problem with the component GET Parameter Handler, where manipulation...

8.8CVSS7AI score0.00729EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/22 12:00 a.m.•2 views

CVE-2023-2244: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

9.8CVSS5.5AI score0.00726EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/04/22 12:00 a.m.•14 views

PT-2023-18486 · Sourcecodester · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue has been found in the component GET Parameter Handler, where the manipulation of the c/s argument leads to sql injection. This issue can be exploited...

8.8CVSS6.8AI score0.00729EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2023/04/17 8:00 p.m.•49 views

CVE-2023-2130 SourceCodester Purchase Order Management System GET Parameter view_details.php sql injection

A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0. Affected is an unknown function of the file /admin/suppliers/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is...

6.5CVSS10AI score0.04122EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/17 12:00 a.m.•2 views

CVE-2023-2130: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0. Affected is an unknown function of the file /admin/suppliers/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is...

9.8CVSS5.5AI score0.04122EPSS
SaveExploits1References2
Prion
Prion
•added 2023/04/15 9:15 a.m.•20 views

Sql injection

A vulnerability classified as critical has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is an unknown function of the file /admin/maintenance/viewdesignation.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

6.5CVSS9AI score0.00729EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2023/04/15 8:15 a.m.•37 views

CVE-2023-2089

A vulnerability was found in SourceCodester Complaint Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/userprofile.php of the component GET Parameter Handler. The manipulation of the argument uid leads to sql injection. The attack...

8.8CVSS7.3AI score0.00602EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/04/15 7:07 a.m.•40 views

CVE-2023-2089 SourceCodester Complaint Management System GET Parameter userprofile.php sql injection

A vulnerability was found in SourceCodester Complaint Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/userprofile.php of the component GET Parameter Handler. The manipulation of the argument uid leads to sql injection. The attack...

6.5CVSS9.2AI score0.00602EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/15 12:00 a.m.•3 views

CVE-2023-2089: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Complaint Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/userprofile.php of the component GET Parameter Handler. The manipulation of the argument uid leads to sql injection. The attack...

8.8CVSS5.5AI score0.00602EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/15 12:00 a.m.•5 views

CVE-2023-2090: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is an unknown function of the file /admin/maintenance/viewdesignation.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

8.8CVSS5.5AI score0.00729EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/04/15 12:00 a.m.•14 views

PT-2023-17691 · Unknown · Sourcecodester Employee/Visitor Gate Pass Logging System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /admin/maintenance/view designation.php, specifically the component GET...

8.8CVSS7.2AI score0.00729EPSS
SaveExploits1References7
NVD
NVD
•added 2023/04/11 5:15 p.m.•28 views

CVE-2023-1983

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manageproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

9.8CVSS7.3AI score0.00737EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/04/11 5:00 p.m.•37 views

CVE-2023-1983 SourceCodester Sales Tracker Management System GET Parameter manage_product.php sql injection

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manageproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

6.5CVSS9.9AI score0.00737EPSS
SaveExploits1References3
Prion
Prion
•added 2023/04/10 4:15 p.m.•28 views

Sql injection

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file /admin/inventory/managestock.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be...

6.5CVSS9.7AI score0.00784EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/04/10 4:00 p.m.•76 views

CVE-2023-1969

CVE-2023-1969 affects SourceCodester Online Eyewear Shop 1.0. A SQL injection flaw exists in the GET parameter handler for /admin/inventory/manage_stock.php via the id parameter, exploitable remotely without authentication. Documented exploits and public disclosure are noted. Impact on confidenti...

9.8CVSS8.4AI score0.00784EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/04/10 4:00 p.m.•44 views

CVE-2023-1969 SourceCodester Online Eyewear Shop GET Parameter manage_stock.php sql injection

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file /admin/inventory/managestock.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be...

6.5CVSS10AI score0.00784EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/10 12:00 a.m.•1 views

CVE-2023-1969: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file /admin/inventory/managestock.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be...

9.8CVSS5.5AI score0.00784EPSS
SaveExploits1References2
Prion
Prion
•added 2023/04/06 1:15 p.m.•24 views

Sql injection

A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/categories/viewcategory.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. ...

6.5CVSS9.7AI score0.00737EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder