Lucene search
+L

80 matches found

CNNVD
CNNVD
added 2025/04/16 12:0 a.m.4 views

SourceCodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an open source online identity generator system from SourceCodester. A security vulnerability exists in SourceCodester Online ID Generator System version 1.0, which stems from a stored cross-site scripting attack due to incorrect manipulation of the...

5.4CVSS6AI score0.00256EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/01/30 12:0 a.m.9 views

needyamin 跨站脚本漏洞

needyamin is an open source library card borrowing system by needyamin. A cross-site scripting vulnerability exists in needyamin version 1.0, which stems from a cross-site scripting attack due to incorrect manipulation of the firstname/lastname/email/borrow/useraddress parameters...

6.9CVSS4.5AI score0.00497EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.7 views

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0. An attacker can exploit the vulnerability to access the database by executing arbitrary SQL commands via the firstname, lastname,...

9.8CVSS7.6AI score0.00582EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.7 views

PT-2024-36438 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System version 1.0 Description: A SQL injection issue was found in the /teacher signup.php file, allowing remote attackers to execute arbitrary SQL commands and gain unauthorized access to the database through...

9.8CVSS9.3AI score0.00582EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/11/14 12:0 a.m.5 views

PT-2024-34432 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A SQL Injection issue was discovered in the /admin/teachers.php file of the KASHIPARA E-learning Management System Project. The firstname and lastname parameters are...

7.2CVSS8.1AI score0.0058EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/11/14 12:0 a.m.14 views

CVE-2024-50834

A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters...

8.2AI score0.0058EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/11/14 12:0 a.m.14 views

PT-2024-34434 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A Stored Cross-Site Scripting XSS issue was discovered in the /admin/teachers.php endpoint, allowing remote attackers to execute arbitrary scripts via the firstname and...

5.4CVSS6.1AI score0.00548EPSS
SaveExploits1References4
NVD
NVD
added 2024/11/13 8:15 p.m.37 views

CVE-2024-42834

A stored cross-site scripting XSS vulnerability in the Create Customer API in Incognito Service Activation Center SAC UI v14.11 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the lastName parameter...

5.4CVSS0.00466EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/13 12:0 a.m.106 views

CVE-2024-42834

The CVE-2024-42834 issue is a stored XSS in the Create Customer API of Incognito Service Activation Center (SAC) UI v14.11. An authenticated attacker can inject a crafted payload via the lastName parameter to execute arbitrary web scripts or HTML. Details across Red Hat, NVD, CNNVD, CIRCL and rel...

5.4CVSS5.5AI score0.00466EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/09/20 12:0 a.m.3 views

SourceCodester Best House Rental Management System SQL注入漏洞

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester. A SQL injection vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which is caused by SQL injection of the parameters firstname/lastname/email...

9.8CVSS7.9AI score0.00698EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/09/20 12:0 a.m.3 views

SourceCodester Best House Rental Management System 安全漏洞

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester, Inc. A security vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which is caused by an SQL injection in the parameters firstname/lastname/email...

8.8CVSS7AI score0.00614EPSS
SaveExploits1References6
OSV
OSV
added 2024/08/15 3:15 a.m.6 views

CVE-2024-7812

A vulnerability classified as problematic was found in SourceCodester Best House Rental Management System 1.0. This vulnerability affects unknown code of the file /rental0/rental/ajax.php?action=savetenant of the component POST Parameter Handler. The manipulation of the argument lastname leads to...

5.4CVSS3.9AI score0.00414EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/08/15 12:0 a.m.9 views

PT-2024-38599 · Sourcecodester · Sourcecodester Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best House Rental Management System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Best House Rental Management System. This issue affects the file /rental 0/rental/ajax.php?action=save...

5.4CVSS4.2AI score0.00414EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2024/08/15 12:0 a.m.5 views

SourceCodester Best House Rental Management System 跨站脚本漏洞

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which originates from a cross-site scripting vulnerability in the lastnam...

5.4CVSS4.6AI score0.00414EPSS
SaveExploits1References5
OSV
OSV
added 2024/03/20 10:15 p.m.6 views

CVE-2024-24050

Cross Site Scripting XSS vulnerability in Sourcecodester Workout Journal App 1.0 allows attackers to run arbitrary code via parameters firstname and lastname in /add-user.php...

4.7CVSS6AI score0.00443EPSS
SaveExploits4References1
ATTACKERKB
ATTACKERKB
added 2024/03/07 1:15 a.m.2 views

CVE-2023-51281

Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters...

5.4CVSS5.8AI score0.00478EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/05 12:15 a.m.7 views

CVE-2023-49548

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customersupport/ajax.php?action=saveuser...

8.8CVSS5.8AI score0.00761EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2024/03/05 12:15 a.m.5 views

CVE-2023-49548

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customersupport/ajax.php?action=saveuser...

8.8CVSS5.9AI score0.00761EPSS
SaveExploits1References3
Prion
Prion
added 2024/03/05 12:15 a.m.22 views

Sql injection

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customersupport/ajax.php?action=saveuser...

8.6AI score0.00761EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/03/04 12:0 a.m.18 views

CVE-2023-49548

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /customersupport/ajax.php?action=saveuser...

8.2AI score0.00761EPSS
SaveExploits1References2
Rows per page
Query Builder