Lucene search
K

368 matches found

Cvelist
Cvelist
added 2024/05/30 3:57 p.m.26 views

CVE-2024-35358

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=viewcategory. Manipulating the argument id can result in SQL injection...

7.7AI score0.00407EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/05/30 12:0 a.m.3 views

Dino Physics School Assistant Security Breach

Dino Physics School Assistant is an application. A security vulnerability exists in Dino Physics School Assistant version 2.3, which stems from a SQL injection vulnerability in the parameter id of the file /classes/Master.php...

6.5CVSS7.9AI score0.00407EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/05/30 12:0 a.m.3 views

Dino Physics School Assistant SQL Injection Vulnerability

Dino Physics School Assistant is an application. A SQL injection vulnerability exists in Dino Physics School Assistant version 2.3, which stems from unrecognized code in /classes/Master.php that causes SQL injection via the parameter id...

5.3CVSS8.2AI score0.00237EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/05/30 12:0 a.m.3 views

Dino Physics School Assistant Security Breach

Dino Physics School Assistant is an application. A security vulnerability exists in Dino Physics School Assistant version 2.3, which stems from a SQL injection vulnerability in the parameter id of the file /classes/Master.php...

6.3CVSS7.9AI score0.00366EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/05/30 12:0 a.m.3 views

PT-2024-26456 · Unknown · Diño Physics School Assistant

Name of the Vulnerable Software and Affected Versions: Diño Physics School Assistant version 2.3 Description: A vulnerability has been discovered that impacts an unidentified code within the file /classes/Master.php?f=delete item. Manipulating the id argument can result in SQL injection...

5.3CVSS7.3AI score0.00237EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/05/30 12:0 a.m.5 views

PT-2024-26453 · Unknown · Diño Physics School Assistant

Name of the Vulnerable Software and Affected Versions: Diño Physics School Assistant version 2.3 Description: A vulnerability has been discovered in the software, impacting an unidentified code within the file /classes/Master.php?f=save category. Manipulating the argument id can result in SQL...

9.8CVSS7.3AI score0.00654EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/05/30 12:0 a.m.2 views

Dino Physics School Assistant Security Breach

Dino Physics School Assistant is an application. A security vulnerability exists in Dino Physics School Assistant version 2.3, which stems from a SQL injection vulnerability in the parameter id of the file /classes/Master.php...

9.8CVSS7.9AI score0.00654EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/04/09 12:0 a.m.6 views

CVE-2024-31544

A stored cross-site scripting XSS vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by including malicious payloads into “remarks”, “borrowername”, “facultydepartment” parameters in /classes/Master.php?f=saverecord...

5.8AI score0.00443EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.2 views

Computer Laboratory Management System 安全漏洞

Computer Laboratory Management System is a computer laboratory management system. A security vulnerability exists in Sourcecodester Computer Laboratory Management System v1.0 that allows an attacker to execute arbitrary JavaScript code via the remarks, borrowername, facultydepartment parameters i...

5.4CVSS7.4AI score0.00443EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/04/09 12:0 a.m.16 views

CVE-2024-31544

A stored cross-site scripting XSS vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by including malicious payloads into “remarks”, “borrowername”, “facultydepartment” parameters in /classes/Master.php?f=saverecord...

5.8AI score0.00443EPSS
Exploits1References1
CVE
CVE
added 2024/04/09 12:0 a.m.42 views

CVE-2024-31544

CVE-2024-31544 applies to the Computer Laboratory Management System v1.0. The vulnerability is a stored cross-site scripting (XSS) flaw that allows an attacker to inject arbitrary JavaScript through the fields “remarks”, “borrower_name” and “faculty_department” in the API endpoint /classes/Master...

5.4CVSS5.8AI score0.00443EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/04/01 12:0 a.m.2 views

PT-2024-23957 · Sourcecodester · Sourcecodester Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Laboratory Management System version 1.0 Description: A critical issue has been identified, affecting the /classes/Master.php?f=save category file. The id argument is vulnerable to manipulation, leading to sql injectio...

6.5CVSS6.8AI score0.00525EPSS
Exploits1References7
CNNVD
CNNVD
added 2024/03/26 12:0 a.m.6 views

Music Gallery Site 代码问题漏洞

Music Gallery Site is a music gallery site by the individual developer Carlo Montero. A code issue vulnerability exists in SourceCodester Music Gallery Site version 1.0, which stems from a file upload vulnerability in the file classes/Master.php...

9.8CVSS7.5AI score0.01182EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/12/27 12:0 a.m.2 views

Medicine Tracker System SQL Injection Vulnerability

Medicine Tracker System is a medicine tracking system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Medicine Tracking System version 1.0, which stems from some unknown processing in /classes/Master.php that leads to SQL injection via the parameters...

9.8CVSS8AI score0.00684EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2023/11/02 7:0 p.m.7 views

CVE-2023-5925 Campcodes Simple Student Information System Master.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Simple Student Information System 1.0. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument f leads to sql injection. The exploit has been disclosed to the public...

5.5CVSS7.8AI score0.00562EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/11/02 7:0 p.m.21 views

CVE-2023-5925 Campcodes Simple Student Information System Master.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Simple Student Information System 1.0. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument f leads to sql injection. The exploit has been disclosed to the public...

5.5CVSS8AI score0.00562EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/11/02 12:0 a.m.3 views

PT-2023-32423 · Campcodes · Campcodes Simple Student Information System

Name of the Vulnerable Software and Affected Versions: Campcodes Simple Student Information System version 1.0 Description: A critical issue has been found in the processing of the file /classes/Master.php. The manipulation of the argument f leads to sql injection. The exploit has been disclosed ...

7.5CVSS6.2AI score0.00562EPSS
Exploits1References7
NVD
NVD
added 2023/10/27 2:15 a.m.11 views

CVE-2023-5814

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been classified as critical. This affects an unknown part of the file /classes/Master.php?f=savereminder. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

8.8CVSS7.3AI score0.00444EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/10/27 2:0 a.m.10 views

CVE-2023-5814 SourceCodester Task Reminder System sql injection

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been classified as critical. This affects an unknown part of the file /classes/Master.php?f=savereminder. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS7.7AI score0.00444EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/10/27 1:31 a.m.11 views

CVE-2023-5813 SourceCodester Task Reminder System sql injection

A vulnerability was found in SourceCodester Task Reminder System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=deletereminder. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

6.5CVSS7.7AI score0.00444EPSS
Exploits0References2
Rows per page
Query Builder