Lucene search
+L

309 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/08 12:00 a.m.•3 views

CVE-2023-1956: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as critical was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=deleteimg of the component Image Handler. The manipulation of the argument path leads to path...

8.8CVSS5.3AI score0.01075EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/04/08 12:00 a.m.•60 views

PT-2023-17369 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical vulnerability was found in the Image Handler component of the affected software, specifically in the /classes/Master.php file, where the path argument is...

8.8CVSS5.7AI score0.01075EPSS
SaveExploits1References6
OSV
OSV
•added 2023/02/21 8:15 p.m.•12 views

CVE-2023-0943

A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects the function savesettings of the file index.php?page=sitesettings of the component Image Handler. The manipulation of the argument img with the input...

8.8CVSS5.4AI score0.02266EPSS
SaveExploits2References2
CVE
CVE
•added 2023/02/21 7:59 p.m.•104 views

CVE-2023-0943

CVE-2023-0943 affects SourceCodester Best POS Management System v1.0, specifically the Image Handler’s save_settings function (index.php?page=site_settings). The vulnerability arises from unsafely handling the img argument (input ../../shell.php), enabling unrestricted file upload and potential r...

8.8CVSS6.6AI score0.02266EPSS
SaveExploits2References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/21 12:00 a.m.•1 views

CVE-2023-0943: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects the function savesettings of the file index.php?page=sitesettings of the component Image Handler. The manipulation of the argument img with the input...

8.8CVSS5.4AI score0.02266EPSS
SaveExploits2References6
CNVD
CNVD
•added 2023/02/21 12:00 a.m.•69 views

Pharmacy Management System Arbitrary File Upload Vulnerability

Pharmacy Management System MPMS is a multi-lingual pharmacy management system developed by Mayuri K. The Pharmacy Management System v1.0 version is vulnerable to arbitrary file uploads due to a lack of validation of uploaded files in the add.php file of the component Avatar Image Handler. php fil...

9.8CVSS1.8AI score0.0072EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/02/21 12:00 a.m.•13 views

Best pos management system 代码问题漏洞

Best pos management system is a best pos management system by Mayuri K. Individual developer. A code issue exists in version 1.0 of Best POS Management System, which is caused by some unknown processing in the file index.php?page=sitesettings of the component image handler, resulting in...

8.8CVSS5.7AI score0.02266EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
•added 2023/02/21 12:00 a.m.•14 views

PT-2023-16629

Name of the Vulnerable Software and Affected Versions SourceCodester Best POS Management System version 1.0 Description A problematic issue has been found in the Image Handler component, affecting the function save settings of the file "index.php?page=site settings". The manipulation of the...

8.8CVSS7.2AI score0.02266EPSS
SaveExploits2References9
OSV
OSV
•added 2023/02/19 9:15 a.m.•13 views

CVE-2023-0918

A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The...

9.8CVSS6.2AI score0.0072EPSS
SaveExploits0References3
NVD
NVD
•added 2023/02/19 9:15 a.m.•32 views

CVE-2023-0918

A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The...

9.8CVSS7.2AI score0.0072EPSS
SaveExploits0References3
Prion
Prion
•added 2023/02/19 9:15 a.m.•31 views

Out-of-bounds

A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The...

6.5CVSS9.5AI score0.0072EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/02/19 8:19 a.m.•45 views

CVE-2023-0918 codeprojects Pharmacy Management System Avatar Image add.php unrestricted upload

A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The...

6.5CVSS9.8AI score0.0072EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/19 12:00 a.m.•2 views

CVE-2023-0918: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The...

9.8CVSS5.2AI score0.0072EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/02/19 12:00 a.m.•14 views

Pharmacy Management System 代码问题漏洞

Pharmacy Management System MPMS is a multi-lingual pharmacy management system developed by Mayuri K. The Pharmacy Management System v1.0 version is vulnerable to arbitrary file uploads due to a lack of validation of uploaded files in the add.php file of the component Avatar Image Handler. php fil...

9.8CVSS7.5AI score0.0072EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/02/19 12:00 a.m.•16 views

PT-2023-16618 · Unknown · Code-Projects Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Pharmacy Management System version 1.0 Description: A critical issue has been found in the Avatar Image Handler component of the file add.php, leading to unrestricted upload. The attack can be initiated remotely. The issue affect...

9.8CVSS7.2AI score0.0072EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2023/02/15 6:20 a.m.•13 views

SUSE CVE-2004-1026

Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service application crash and execute arbitrary code via certain image files...

10CVSS7.8AI score0.04934EPSS
SaveExploits0References3
Redos
Redos
•added 2023/01/24 12:00 a.m.•30 views

ROS-20230124-03

Vulnerability of LibTIFF set of libraries and utilities for viewing, editing and converting TIFF files is related to the processCropSelections function of the tools/tiffcrop.c file of the TIFF Image Handler component. Exploitation of the vulnerability could allow an attacker acting remotely to se...

5.5CVSS6.3AI score0.00443EPSS
SaveExploits1
NVD
NVD
•added 2022/11/14 5:15 p.m.•36 views

CVE-2022-3992

A vulnerability classified as problematic was found in SourceCodester Sanitization Management System. Affected by this vulnerability is an unknown functionality of the file admin/?page=systeminfo of the component Banner Image Handler. The manipulation leads to cross site scripting. The attack can...

6.1CVSS0.00495EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/14 12:00 a.m.•2 views

CVE-2022-3992: Improper Neutralization

A vulnerability classified as problematic was found in SourceCodester Sanitization Management System. Affected by this vulnerability is an unknown functionality of the file admin/?page=systeminfo of the component Banner Image Handler. The manipulation leads to cross site scripting. The attack can...

6.1CVSS4AI score0.00495EPSS
SaveExploits0References3
CVE
CVE
•added 2022/11/14 12:00 a.m.•65 views

CVE-2022-3992

CVE-2022-3992 affects SourceCodester Sanitization Management System. The vulnerability is in an unknown functionality of the file admin/?page=system_info within the Banner Image Handler, enabling cross-site scripting. Attacks can be launched remotely; CVSS scores in the sources range from 6.1 (NV...

6.1CVSS4.5AI score0.00495EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder