Lucene search
+L

725 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/13 12:00 a.m.•13 views

CVE-2023-3658: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file Master.php?f=deletebook of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. It is...

9.8CVSS6.7AI score0.00541EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/13 12:00 a.m.•9 views

CVE-2023-3657: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. This issue affects some unknown processing of the file Master.php?f=savebook of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injectio...

9.8CVSS6.6AI score0.00541EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/13 12:00 a.m.•10 views

CVE-2023-3661: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /classes/Master.php?f=saveinquiry. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

9.8CVSS6.6AI score0.00541EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/12 12:00 a.m.•11 views

CVE-2023-3644: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=saveinquiry. The manipulation of the argument id leads to sql injection. The attack can be initiated...

9.8CVSS6.6AI score0.00492EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/11 12:00 a.m.•10 views

CVE-2023-3619: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This issue affects some unknown processing of the file Master.php?f=saveservice of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. The...

9.8CVSS6.7AI score0.00492EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/17 12:00 a.m.•10 views

CVE-2023-2769: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Service Provider Management System 1.0. This affects an unknown part of the file /classes/Master.php?f=deleteservice. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

8.8CVSS5.5AI score0.00734EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/12 12:00 a.m.•10 views

CVE-2023-2671: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file classes/Master.php?f=saveinquiry of the component Contact Form. The manipulation of the argument fullname/contact/message lea...

6.1CVSS3.8AI score0.00633EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/05/11 3:00 p.m.•48 views

CVE-2023-2661 SourceCodester Online Computer and Laptop Store Master.php sql injection

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit ha...

6.5CVSS10AI score0.0082EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2023/05/11 9:15 a.m.•20 views

CVE-2023-2652

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Affected is an unknown function of the file /classes/Master.php?f=deleteitem. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS6.4AI score0.00726EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/11 12:00 a.m.•8 views

CVE-2023-2661: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit ha...

9.8CVSS5.5AI score0.0082EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/11 12:00 a.m.•6 views

CVE-2023-2656: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file /classes/Master.php?f=deleteservice. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS5.5AI score0.00937EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/05/11 12:00 a.m.•18 views

AC Repair and Services System SQL Injection Vulnerability

AC Repair and Services System is an air conditioning repair and services system by Carlo Montero Personal Developer. SourceCodester AC Repair and Services System version 1.0 suffers from a SQL injection vulnerability that stems from a problem with the file /classes/Master.php?f=deleteservice, whe...

9.8CVSS7AI score0.00937EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/11 12:00 a.m.•7 views

CVE-2023-2652: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Affected is an unknown function of the file /classes/Master.php?f=deleteitem. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.5AI score0.00726EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/04/29 8:15 a.m.•18 views

CVE-2023-2425

A vulnerability was found in SourceCodester Simple Student Information System 1.0. It has been classified as problematic. This affects an unknown part of the file /classes/Master.php?f=savecourse of the component Add New Course. The manipulation of the argument name with the input...

4.8CVSS3.7AI score0.00564EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/29 12:00 a.m.•6 views

CVE-2023-2425: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Simple Student Information System 1.0. It has been classified as problematic. This affects an unknown part of the file /classes/Master.php?f=savecourse of the component Add New Course. The manipulation of the argument name with the input leads to cross...

4.8CVSS4AI score0.00564EPSS
SaveExploits1References2
NVD
NVD
•added 2023/04/28 10:15 p.m.•27 views

CVE-2023-2397

A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Mobile Comparison Website 1.0. This issue affects some unknown processing of the file classes/Master.php?f=savefield. The manipulation of the argument Field Name leads to cross site scripting. The attack...

4.8CVSS3.9AI score0.00576EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•6 views

CVE-2023-2372: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Online DJ Management System 1.0. Affected by this issue is some unknown functionality of the file classes/Master.php?f=saveevent. The manipulation of the argument name leads to cross site scripting. The attack...

4.8CVSS3.9AI score0.0061EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•9 views

CVE-2023-2397: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Mobile Comparison Website 1.0. This issue affects some unknown processing of the file classes/Master.php?f=savefield. The manipulation of the argument Field Name leads to cross site scripting. The attack...

4.8CVSS3.9AI score0.00576EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/27 12:00 a.m.•5 views

CVE-2023-2345: Improper Authorization

A vulnerability was found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=deleteinquiry. The manipulation leads to improper authorization. The attack may be launched remotel...

9.8CVSS5.5AI score0.00511EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/27 12:00 a.m.•9 views

CVE-2023-2344: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=saveservice of the component HTTP POST Request Handler. The manipulation of the argument...

9.8CVSS5.5AI score0.00834EPSS
SaveExploits1References2
Rows per page
Query Builder