Lucene search
+L

386 matches found

OSV
OSV
added 2023/04/14 8:15 p.m.6 views

CVE-2023-2074

A vulnerability was found in Campcodes Online Traffic Offense Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely...

9.8CVSS6.6AI score0.00791EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/04/11 12:00 a.m.8 views

PT-2023-17394 · Sourcecodester · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue has been found in the function update order status of the file /classes/Master.php?f=update order status. The manipulation of the argument id leads to s...

7.2CVSS6.9AI score0.00767EPSS
SaveExploits1References6
CNVD
CNVD
added 2023/04/11 12:00 a.m.26 views

Online Computer and Laptop Store Path Traversal Vulnerability

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. A path traversal vulnerability exists in Online Computer and Laptop Store v1.0. The vulnerability stems from the fact that the parameter path in the file /classes/Master.php?f=deleteim...

8.5AI score0.01075EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/11 12:00 a.m.18 views

PT-2023-17393 · Sourcecodester · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue was found in the function delete order of the file /classes/master.php?f=delete order. The manipulation of the argument id leads to sql injection. It is...

7.2CVSS6.9AI score0.00767EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2023/04/10 12:00 a.m.9 views

CVE-2023-26773

Cross Site Scripting vulnerability found in Sales Tracker Management System v.1.0 allows a remote attacker to gain privileges via the product list function in the Master.php file...

6.3AI score0.00878EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2023/04/10 12:00 a.m.12 views

Sales Tracker Management System 跨站脚本漏洞

Sales Tracker Management System is a sales tracking management system by Carlo Montero Personal Developer. A security vulnerability exists in Sales Tracker Management System version v.1.0. An attacker can exploit this vulnerability to gain access to the product list function in the Master.php fil...

6.1CVSS6.3AI score0.00878EPSS
SaveExploits2References5
CNNVD
CNNVD
added 2023/04/08 12:00 a.m.12 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to a SQL injection vulnerability that originates in the file /classes/Master.php?f=savesubcategory with the parameter subcategory...

8.8CVSS8.2AI score0.00717EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/08 12:00 a.m.10 views

PT-2023-17369 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical vulnerability was found in the Image Handler component of the affected software, specifically in the /classes/Master.php file, where the path argument is...

8.8CVSS5.7AI score0.01075EPSS
SaveExploits1References6
zdt
zdt
added 2023/04/06 12:00 a.m.256 views

Music Gallery Site v1.0 - Broken Access Control Vulnerability

Exploit Title: Music Gallery Site v1.0 - Broken Access Control Exploit Author: Muhammad Navaid Zafar Ansari CVE Assigned: CVE-2023-0963 mitre.org nvd.nist.org Vendor Homepage: https://www.sourcecodester.com Software Link: Music Gallery Site Version: v 1.0 Tested on: Windows 11 Broken...

9.8CVSS9.4AI score0.0467EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2023/04/06 12:00 a.m.290 views

Music Gallery Site v1.0 - SQL Injection on page Master.php

Exploit Title: Music Gallery Site v1.0 - SQL Injection on page Master.php Exploit Author: Muhammad Navaid Zafar Ansari Date: 21 February 2023 CVE Assigned: CVE-2023-0962 mitre.org nvd.nist.org Vendor Homepage: https://www.sourcecodester.com Software Link: Music Gallery Site Version: v 1.0 Tested...

8.8CVSS6.8AI score0.01741EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2023/04/06 12:00 a.m.297 views

Music Gallery Site v1.0 - Broken Access Control

Exploit Title: Music Gallery Site v1.0 - Broken Access Control Exploit Author: Muhammad Navaid Zafar Ansari Date: 21 February 2023 CVE Assigned: CVE-2023-0963 mitre.org nvd.nist.org Vendor Homepage: https://www.sourcecodester.com Software Link: Music Gallery Site Version: v 1.0 Tested on: Windows...

9.8CVSS7.4AI score0.0467EPSS
SaveExploits5
Prion
Prion
added 2023/03/31 12:15 p.m.22 views

Sql injection

A vulnerability has been found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as critical. Affected by this vulnerability is the function getscale of the file Master.php. The manipulation of the argument perc leads to sql injection. The attack can be launched remotely. Th...

6.5CVSS9.7AI score0.00738EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2023/03/31 12:15 p.m.22 views

Cross site scripting

A vulnerability was found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as problematic. Affected by this issue is the function getscale of the file Master.php. The manipulation of the argument perc leads to cross site scripting. The attack may be launched remotely. The...

4CVSS6AI score0.00549EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/03/31 11:31 a.m.29 views

CVE-2023-1771 SourceCodester Grade Point Average GPA Calculator Master.php get_scale cross site scripting

A vulnerability was found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as problematic. Affected by this issue is the function getscale of the file Master.php. The manipulation of the argument perc leads to cross site scripting. The attack may be launched remotely. The...

4CVSS6.2AI score0.00549EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/03/31 12:00 a.m.10 views

PT-2023-17230 · Sourcecodester · Sourcecodester Grade Point Average Gpa Calculator

Name of the Vulnerable Software and Affected Versions: SourceCodester Grade Point Average GPA Calculator version 1.0 Description: A critical issue has been found, affecting the function get scale of the file Master.php. The manipulation of the argument perc leads to sql injection. The attack can ...

9.8CVSS7.5AI score0.00738EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/03/09 12:00 a.m.15 views

Sales Tracker Management System SQL注入漏洞

Sales Tracker Management System is a sales tracker management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Sales Tracker Management System version 1.0, which stems from some security issues in the deleteclient function of the file...

9.8CVSS7AI score0.00763EPSS
SaveExploits1References4
NVD
NVD
added 2023/02/22 7:15 p.m.38 views

CVE-2023-0962

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been declared as critical. This vulnerability affects unknown code of the file Master.php of the component GET Request Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated...

8.8CVSS7.3AI score0.01741EPSS
SaveExploits5References3
CNNVD
CNNVD
added 2023/02/22 12:00 a.m.12 views

Music Gallery Site SQL注入漏洞

Music Gallery Site is a music gallery site by the individual developer Carlo Montero. A SQL injection vulnerability exists in SourceCodester Music Gallery Site version 1.0, which stems from a problem in the file Master.php, where manipulation of the parameter id can lead to sql injection...

8.8CVSS6.9AI score0.01741EPSS
SaveExploits5References5
NVD
NVD
added 2023/01/13 8:15 p.m.25 views

CVE-2022-46947

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletecategory...

7.2CVSS7.2AI score0.00821EPSS
SaveExploits1References1
NVD
NVD
added 2023/01/13 8:15 p.m.18 views

CVE-2022-46946

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletebrand...

7.2CVSS7.2AI score0.00821EPSS
SaveExploits1References1
Rows per page
Query Builder