Lucene search
+L

521 matches found

Vulnrichment
Vulnrichment
added 2024/03/07 12:00 a.m.12 views

CVE-2023-33676

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=" which can be escalated to the remote command execution...

9AI score0.00672EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/07 12:00 a.m.9 views

PT-2024-12435 · Sourcecodester · Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Lost and Found Information System version 1.0 Description: The issue concerns an unauthenticated SQL Injection vulnerability at the "/items/view&id=" endpoint, which can be escalated to remote command execution. Recommendations...

8.4CVSS7.6AI score0.00672EPSS
SaveExploits0References4
CVE
CVE
added 2024/03/07 12:00 a.m.70 views

CVE-2023-33676

Sourcecodester Lost and Found Information System, Version 1.0, is vulnerable to unauthenticated SQL injection in the endpoint /items/view (parameter id) via the query string ?page=items/view&id=*, which can escalate to remote command execution. Affected software/component: Sourcecodester Lost and...

8.4CVSS8.4AI score0.00672EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/07 12:00 a.m.25 views

CVE-2023-33676

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=" which can be escalated to the remote command execution...

8.4AI score0.00672EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/07 12:00 a.m.8 views

Lost and Found Information System security breach

Lost and Found Information System is a lost and found information system by oretnom23 Individual Developer. A security vulnerability exists in the Lost and Found Information System that originates from an unauthenticated SQL injection attack via "?page=items/view&id=", which can be escalated to...

8.4CVSS8AI score0.00672EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/06 1:15 a.m.8 views

CVE-2023-33677

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...

7.5CVSS5.8AI score0.00404EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/03/06 1:15 a.m.9 views

CVE-2023-33677

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...

7.5CVSS5.8AI score0.00404EPSS
SaveExploits0References3
NVD
NVD
added 2024/03/06 1:15 a.m.18 views

CVE-2023-33677

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...

7.5CVSS7.8AI score0.00404EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/06 1:15 a.m.20 views

Sql injection

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...

8.6AI score0.00404EPSS
SaveExploits0References2
CVE
CVE
added 2024/03/06 12:00 a.m.60 views

CVE-2023-33677

CVE-2023-33677 affects Sourcecodester Lost and Found Information System v1.0. The vulnerability is an unauthenticated SQL Injection exposed at the API endpoint ?page=items/view&id=. The root cause is improper input handling for the id parameter, allowing crafted input to influence database querie...

7.5CVSS8.1AI score0.00404EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/06 12:00 a.m.9 views

CVE-2023-33677

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...

8.2AI score0.00404EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/06 12:00 a.m.8 views

Lost and Found Information System SQL Injection Vulnerability

Lost and Found Information System is a lost and found information system by oretnom23 individual developers. A SQL injection vulnerability exists in the Sourcecodester Lost and Found Information System version 1.0, which originates from the system's susceptibility to unauthenticated SQL injection...

7.5CVSS7.7AI score0.00404EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/03/06 12:00 a.m.26 views

CVE-2023-33677

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...

8.1AI score0.00404EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/02/28 8:13 a.m.36 views

CVE-2021-46989 hfsplus: prevent corruption in shrinking truncate

In the Linux kernel, the following vulnerability has been resolved: hfsplus: prevent corruption in shrinking truncate I believe there are some issues introduced by commit 31651c607151 "hfsplus: avoid deadlock on file truncation" HFS+ has extent records which always contains 8 extents. In case the...

7.1CVSS7.8AI score0.0024EPSS
SaveExploits0References6
OSV
OSV
added 2024/02/23 7:15 p.m.7 views

CVE-2024-1830

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched...

9.8CVSS5.8AI score0.00813EPSS
SaveExploits1References3
NVD
NVD
added 2024/02/23 7:15 p.m.28 views

CVE-2024-1830

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched...

9.8CVSS7.5AI score0.00813EPSS
SaveExploits1References3
Prion
Prion
added 2024/02/23 7:15 p.m.24 views

Sql injection

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched...

7.5CVSS7.6AI score0.00813EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/02/23 6:31 p.m.51 views

CVE-2024-1830 code-projects Library System lost-password.php sql injection

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched...

7.5CVSS7.7AI score0.00813EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/02/23 12:00 a.m.8 views

PT-2024-18345 · Unknown · Code-Projects Library System

Name of the Vulnerable Software and Affected Versions: code-projects Library System version 1.0 Description: A critical issue was found in the code-projects Library System, affecting some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the...

9.8CVSS7.8AI score0.00813EPSS
SaveExploits1References9
Exploit DB
Exploit DB
added 2024/02/13 12:00 a.m.480 views

Lost and Found Information System v1.0 - ( IDOR ) leads to Account Take over

Exploit Title: Lost and Found Information System v1.0 - idor leads to Account Take over Date: 2023-12-03 Exploit Author: OR4NG.M4N Category : webapps CVE : CVE-2023-38965 Python p0c : import argparse import requests import time parser = argparse.ArgumentParserdescription='Send a POST request to t...

9.8CVSS8.4AI score0.01264EPSS
SaveExploits4
Rows per page
Query Builder