Lucene search
+L

111 matches found

Cvelist
Cvelist
•added 2024/08/26 3:31 p.m.•58 views

CVE-2024-8170 SourceCodester Zipped Folder Manager App add-folder.php unrestricted upload

A vulnerability classified as problematic has been found in SourceCodester Zipped Folder Manager App 1.0. This affects an unknown part of the file /endpoint/add-folder.php. The manipulation of the argument folder leads to unrestricted upload. It is possible to initiate the attack remotely. The...

5.3CVSS0.00768EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/26 12:00 a.m.•8 views

CVE-2024-8170: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as problematic has been found in SourceCodester Zipped Folder Manager App 1.0. This affects an unknown part of the file /endpoint/add-folder.php. The manipulation of the argument folder leads to unrestricted upload. It is possible to initiate the attack remotely. The...

9.8CVSS5.1AI score0.00768EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/08/26 12:00 a.m.•23 views

SourceCodester Zipped Folder Manager App 代码问题漏洞

SourceCodester Zipped Folder Manager App is an open source zipped folder manager application from SourceCodester. A code issue vulnerability exists in version 1.0 of the SourceCodester Zipped Folder Manager App that stems from improper handling of the parameter folder, resulting in unrestricted...

9.8CVSS5.1AI score0.00768EPSS
SaveExploits1References6
NVD
NVD
•added 2024/08/20 2:15 a.m.•29 views

CVE-2024-7948

A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of the file update-account.php of the component Update Account Page. The manipulation of the argument Account Name/Username/Password/Link leads to cross site...

5.4CVSS0.00447EPSS
SaveExploits1References4
CVE
CVE
•added 2024/08/20 2:00 a.m.•69 views

CVE-2024-7948

The CVE-2024-7948 entry concerns SourceCodester Accounts Manager App 1.0. The vulnerability lies in the Update Account Page’s update-account.php where manipulating parameters (Account Name, Username, Password, Link) enables cross-site scripting. Descriptions across multiple sources indicate remot...

5.4CVSS4AI score0.00447EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/20 12:00 a.m.•7 views

CVE-2024-7948: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affects unknown code of the file update-account.php of the component Update Account Page. The manipulation of the argument Account Name/Username/Password/Link leads to cross site...

5.4CVSS3.6AI score0.00447EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/08/19 12:00 a.m.•20 views

PT-2024-38713 · Sourcecodester · Sourcecodester Accounts Manager App

Name of the Vulnerable Software and Affected Versions: SourceCodester Accounts Manager App version 1.0 Description: A vulnerability was found in the SourceCodester Accounts Manager App, affecting the file update-account.php of the component Update Account Page. The manipulation of the Account Nam...

5.4CVSS4.4AI score0.00447EPSS
SaveExploits1References9
NVD
NVD
•added 2024/08/13 10:15 p.m.•36 views

CVE-2024-7749

A vulnerability, which was classified as problematic, was found in SourceCodester Accounts Manager App 1.0. Affected is an unknown function of the file /endpoint/add-account.php. The manipulation of the argument accountname leads to cross site scripting. It is possible to launch the attack...

5.4CVSS0.00497EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2024/08/13 10:15 p.m.•19 views

CVE-2024-7748

A vulnerability, which was classified as critical, has been found in SourceCodester Accounts Manager App 1.0. This issue affects some unknown processing of the file /endpoint/delete-account.php. The manipulation of the argument account leads to sql injection. The attack may be initiated remotely...

9.8CVSS5.8AI score0.00663EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2024/08/13 10:15 p.m.•18 views

CVE-2024-7749

A vulnerability, which was classified as problematic, was found in SourceCodester Accounts Manager App 1.0. Affected is an unknown function of the file /endpoint/add-account.php. The manipulation of the argument accountname leads to cross site scripting. It is possible to launch the attack...

5.4CVSS3.8AI score0.00497EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/08/13 10:00 p.m.•21 views

CVE-2024-7749 SourceCodester Accounts Manager App add-account.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Accounts Manager App 1.0. Affected is an unknown function of the file /endpoint/add-account.php. The manipulation of the argument accountname leads to cross site scripting. It is possible to launch the attack...

5.3CVSS6.2AI score0.00497EPSS
SaveExploits1References4
CVE
CVE
•added 2024/08/13 9:31 p.m.•79 views

CVE-2024-7748

SourceCodester Accounts Manager App 1.0 contains a SQL injection in the /endpoint/delete-account.php endpoint via the account parameter. The vulnerability allows remote exploitation and can impact confidentiality, integrity, and availability as described in multiple sources. The root cause is uns...

9.8CVSS6.8AI score0.00663EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/08/13 9:31 p.m.•46 views

CVE-2024-7748 SourceCodester Accounts Manager App delete-account.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Accounts Manager App 1.0. This issue affects some unknown processing of the file /endpoint/delete-account.php. The manipulation of the argument account leads to sql injection. The attack may be initiated remotely...

6.5CVSS0.00663EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/08/13 12:00 a.m.•16 views

SourceCodester Accounts Manager App SQL注入漏洞

SourceCodester Accounts Manager App is a web-based application from SourceCodester, Inc. It is designed to manage online accounts efficiently and securely. A SQL injection vulnerability exists in SourceCodester Accounts Manager App version 1.0, which stems from the parameter account in the file...

9.8CVSS7.1AI score0.00663EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/08/13 12:00 a.m.•19 views

PT-2024-38557 · Sourcecodester · Sourcecodester Accounts Manager App

Name of the Vulnerable Software and Affected Versions: SourceCodester Accounts Manager App version 1.0 Description: A problematic issue was found in the SourceCodester Accounts Manager App, affecting an unknown function of the file /endpoint/add-account.php. The manipulation of the account name...

5.4CVSS4.3AI score0.00497EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/13 12:00 a.m.•10 views

CVE-2024-7749: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Accounts Manager App 1.0. Affected is an unknown function of the file /endpoint/add-account.php. The manipulation of the argument accountname leads to cross site scripting. It is possible to launch the attack...

5.4CVSS3.8AI score0.00497EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/13 12:00 a.m.•7 views

CVE-2024-7748: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Accounts Manager App 1.0. This issue affects some unknown processing of the file /endpoint/delete-account.php. The manipulation of the argument account leads to sql injection. The attack may be initiated remotely...

9.8CVSS6.5AI score0.00663EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/12 12:00 a.m.•6 views

CVE-2024-7660: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Add File Handler. The manipulation of the argument File Title/Uploaded By leads to cross site scripting. The attack can ...

6.1CVSS3.6AI score0.00517EPSS
SaveExploits1References1
CVE
CVE
•added 2024/08/11 3:00 a.m.•93 views

CVE-2024-7660

SourceCodester File Manager App 1.0 contains a cross‑site scripting vulnerability in the Add File Handler. Manipulating the File Title/Uploaded By parameter can trigger XSS, with remote exploitation and a publicly disclosed exploit. Connected advisories do not specify the exact XSS type (reflecte...

6.1CVSS3.8AI score0.00517EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/08/11 3:00 a.m.•44 views

CVE-2024-7660 SourceCodester File Manager App Add File cross site scripting

A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Add File Handler. The manipulation of the argument File Title/Uploaded By leads to cross site scripting. The attack can ...

5.3CVSS0.00517EPSS
SaveExploits1References4
Rows per page
Query Builder