CVE-2024-37857

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categories/viewcategory.php...

CVE-2024-37859

CVE-2024-37859 affects Lost and Found Information System version 1.0. The vulnerability is a Cross Site Scripting flaw exposed via the page parameter to php-lfis/admin/index.php, enabling a remote attacker to escalate privileges. The exploitation details and affected endpoint are corroborated by ...

CVE-2024-37858

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to php-lfis/admin/categories/managecategory.php...

CVE-2024-37859

Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page parameter to php-lfis/admin/index.php...

CVE-2024-37856

Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the first, last, middle name fields in the User Profile page...

CVE-2024-37856

CVE-2024-37856 : A stored XSS in Lost and Found Information System 1.0 affects the users’ profile fields (first, last, middle name) on the User Profile page, enabling a remote attacker to escalate privileges. The vulnerability is triggered via input into profile name fields and has been demonstra...

PT-2024-27788 · Unknown · Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: Lost and Found Information System version 1.0 Description: The issue allows a remote attacker to escalate privileges. This is achieved via the id parameter to the "php-lfis/admin/categories/manage category.php" endpoint. Recommendations: For...

Lost And Found Information System 安全漏洞

Lost And Found Information System is a lost and found information system from Lost And Found. A security vulnerability exists in Lost And Found Information System version 1.0, which originates from a cross-site scripting vulnerability that allows a remote attacker to elevate the privileges of the...

CVE-2024-37858

CVE-2024-37858 describes an SQL injection in Lost and Found Information System 1.0. The vulnerability exists in the id parameter of php-lfis/admin/categories/manage_category.php, enabling a remote attacker to escalate privileges. Public references indicate an unauthenticated, blind time-based SQL...

CVE-2024-37857

CVE-2024-37857 describes a SQL Injection in Lost and Found Information System 1.0 . The vulnerability is triggered via the id parameter to php-lfis/admin/categories/view_category.php , enabling a remote attacker to escalate privileges. Documented characteristics (CVSS v3.1: Network, Privileges Re...

CVE-2024-37857

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categories/viewcategory.php...

PT-2024-27786 · Unknown · Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: Lost and Found Information System version 1.0 Description: The issue allows a remote attacker to escalate privileges via the first, last, middle name fields in the "User Profile" page. This is due to a Cross Site Scripting vulnerability...

Lost And Found Information System 安全漏洞

Lost And Found Information System is a lost and found information system from Lost And Found. A security vulnerability exists in Lost and Found Information System version 1.0, which stems from a cross-site scripting vulnerability that allows a remote attacker to elevate privileges via the first,...

Lost And Found Information System 1.0 Cross Site Scripting

Exploit Title: Stored Cross Site Scripting Exploit - Lost and Found Information System Exploit Author: Amit Roy Rezur / AR0x7 Date: June 07, 2024 Vendor Homepage: https://www.sourcecodester.com/php/16525/lost-and-found-information-system-using-php-and-mysql-db-source-code-free-download.html...

Lost And Found Information System 1.0 Cross Site Scripting

Exploit Title: Refelcted Cross Site Scripting Exploit - Lost and Found Information System Exploit Author: Amit Roy Rezur / AR0x7 Date: June 07, 2024 Vendor Homepage: https://www.sourcecodester.com/php/16525/lost-and-found-information-system-using-php-and-mysql-db-source-code-free-download.html...

Session Fixation

contao/core-bundle is vulnerable to Session Fixation. The vulnerability is due to a flaw in the personal data and password lost modules. allowing compromised accounts to retain access even after password changes...

SUSE CVE-2024-26739

In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: don't override retval if we already lost the skb If we're redirecting the skb, and haven't called tcfmirredforward, yet, we need to tell the core to drop the skb by setting the retcode to SHOT. If we have...

CVE-2023-33676

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=" which can be escalated to the remote command execution...

CVE-2023-33676

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=" which can be escalated to the remote command execution...

CVE-2023-33676

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=" which can be escalated to the remote command execution...