Lucene search
+L

521 matches found

OSV
OSV
added 2023/05/31 3:15 p.m.9 views

CVE-2023-3018

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/?page=user/list. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit ha...

8.8CVSS5.5AI score0.00735EPSS
SaveExploits3References3
Prion
Prion
added 2023/05/31 3:15 p.m.26 views

Cross site scripting

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been classified as problematic. This affects an unknown part of the file admin/?page=user/manageuser of the component Manage User Page. The manipulation of the argument First Name/Middle Name/Last Name leads...

3.3CVSS5.2AI score0.00547EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/05/31 2:31 p.m.56 views

CVE-2023-3018 SourceCodester Lost and Found Information System access control

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/?page=user/list. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit ha...

6.5CVSS9AI score0.00735EPSS
SaveExploits3References3
CVE
CVE
added 2023/05/31 2:31 p.m.66 views

CVE-2023-3018

CVE-2023-3018 pertains to the SourceCodester Lost and Found Information System 1.0. The vulnerability affects the endpoint /admin/?page=user/list, where improper access controls allow remote manipulation, enabling privilege escalation to access admin functionalities. Multiple connected sources co...

8.8CVSS7.6AI score0.00735EPSS
SaveExploits3References3Affected Software1
CVE
CVE
added 2023/05/31 2:31 p.m.64 views

CVE-2023-3017

CVE-2023-3017 affects SourceCodester Lost and Found Information System 1.0, specifically the Manage User Page endpoint (admin/?page=user/manage_user). The issue is a basic cross-site scripting (XSS) vulnerability arising from manipulation of the First Name/Middle Name/Last Name fields, reported a...

5.4CVSS4.3AI score0.00547EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/05/31 2:31 p.m.29 views

CVE-2023-3017 SourceCodester Lost and Found Information System Manage User Page cross site scripting

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been classified as problematic. This affects an unknown part of the file admin/?page=user/manageuser of the component Manage User Page. The manipulation of the argument First Name/Middle Name/Last Name leads...

3.3CVSS5.5AI score0.00547EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/05/31 12:00 a.m.9 views

Lost and Found Information System 安全漏洞

Lost and Found Information System is a lost and found management system. A cross-site scripting vulnerability exists in Lost and Found Information System version 1.0, which can be exploited by attackers to inject malicious JavaScript script...

5.4CVSS6AI score0.00547EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/05/31 12:00 a.m.16 views

PT-2023-22568 · Sourcecodester · Sourcecodester Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A critical issue has been identified, affecting the /admin/?page=user/list file, which leads to improper access controls. The attack can be initiated remotely...

8.8CVSS6.5AI score0.00735EPSS
SaveExploits3References6
CNNVD
CNNVD
added 2023/05/31 12:00 a.m.10 views

Lost and Found Information System 访问控制错误漏洞

Lost and Found Information System is a lost and found information system by oretnom23 Individual Developer. An Access Control Error vulnerability exists in Lost and Found Information System version 1.0, which stems from incorrect access control...

8.8CVSS6.8AI score0.00735EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
added 2023/05/31 12:00 a.m.13 views

PT-2023-22564 · Sourcecodester · Sourcecodester Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A vulnerability was found in the Manage User Page component, specifically affecting the "admin/?page=user/manage user" endpoint. The issue arises from the manipulation ...

5.4CVSS3.9AI score0.00547EPSS
SaveExploits1References4
Packet Storm
Packet Storm
added 2023/05/23 12:00 a.m.291 views

WBiz Desk 1.2 SQL Injection

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

7.1AI score
SaveExploits0
OSV
OSV
added 2023/05/14 12:15 p.m.8 views

CVE-2023-2699

A vulnerability, which was classified as critical, has been found in SourceCodester Lost and Found Information System 1.0. Affected by this issue is some unknown functionality of the file admin/?page=items/viewitem of the component GET Parameter Handler. The manipulation of the argument id leads ...

9.8CVSS6.5AI score0.0082EPSS
SaveExploits1References3
Prion
Prion
added 2023/05/14 12:15 p.m.30 views

Sql injection

A vulnerability classified as critical was found in SourceCodester Lost and Found Information System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=items/manageitem of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

6.5CVSS9.7AI score0.0082EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2023/05/14 12:15 p.m.26 views

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Lost and Found Information System 1.0. Affected by this issue is some unknown functionality of the file admin/?page=items/viewitem of the component GET Parameter Handler. The manipulation of the argument id leads ...

6.5CVSS9.6AI score0.0082EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/05/14 12:00 p.m.69 views

CVE-2023-2699

CVE-2023-2699 affects SourceCodester Lost and Found Information System 1.0. The vulnerability is an SQL injection in the GET parameter handler for admin/?page=items/view_item, caused by unsafely constructed SQL with the id argument. Exploitation can be remote; CVSS metrics in the initial data ind...

9.8CVSS8.2AI score0.0082EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/05/14 12:00 p.m.49 views

CVE-2023-2699 SourceCodester Lost and Found Information System GET Parameter sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Lost and Found Information System 1.0. Affected by this issue is some unknown functionality of the file admin/?page=items/viewitem of the component GET Parameter Handler. The manipulation of the argument id leads ...

6.5CVSS9.9AI score0.0082EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/05/14 11:31 a.m.27 views

CVE-2023-2698 SourceCodester Lost and Found Information System GET Parameter sql injection

A vulnerability classified as critical was found in SourceCodester Lost and Found Information System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=items/manageitem of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

6.5CVSS10AI score0.0082EPSS
SaveExploits1References3
CVE
CVE
added 2023/05/14 11:31 a.m.74 views

CVE-2023-2698

SourceCodester Lost and Found Information System 1.0 has a SQL injection vulnerability in the GET Parameter Handler at admin/?page=items/manage_item via the id parameter. The issue is exploitable remotely, with public disclosure of exploits. Multiple sources (NVD, Red Hat advisory, CVE lists, and...

9.8CVSS8.4AI score0.0082EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/05/14 12:00 a.m.8 views

Lost and Found Information System SQL注入漏洞

Lost and Found Information System is a lost and found information system by oretnom23 individual developer. A SQL injection vulnerability exists in SourceCodester Lost and Found Information System version 1.0, which stems from a problem in the file admin/?page=items/manageitem of the component GE...

9.8CVSS6.9AI score0.0082EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/05/14 12:00 a.m.23 views

Lost and Found Information System SQL注入漏洞

Lost and Found Information System is a lost and found information system by the individual developer oretnom23. A SQL injection vulnerability exists in SourceCodester Lost and Found Information System version 1.0, which stems from a problem in the file admin/?page=items/viewitem of the component...

9.8CVSS7AI score0.0082EPSS
SaveExploits1References4
Rows per page
Query Builder