Lucene search
+L

20571 matches found

OSV
OSV
added 2024/03/04 1:15 a.m.8 views

CVE-2024-2153

A vulnerability, which was classified as critical, was found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /admin/orders/vieworder.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS6.4AI score0.0066EPSS
SaveExploits1References3
CVE
CVE
added 2024/03/04 12:31 a.m.66 views

CVE-2024-2154

CVE-2024-2154 affects SourceCodester Online Mobile Management Store 1.0, specifically the view_product.php file where the id parameter enables SQL injection. The vulnerability is exploitable remotely and has been disclosed publicly (VDB-255586); impact is high for confidentiality, integrity, and ...

9.8CVSS7.1AI score0.00634EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/04 12:31 a.m.19 views

CVE-2024-2154 SourceCodester Online Mobile Management Store view_product.php sql injection

A vulnerability has been found in SourceCodester Online Mobile Management Store 1.0 and classified as critical. This vulnerability affects unknown code of the file viewproduct.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has be...

6.5CVSS7.5AI score0.00634EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/03/04 12:31 a.m.37 views

CVE-2024-2153 SourceCodester Online Mobile Management Store view_order.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /admin/orders/vieworder.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS7AI score0.0066EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/03/04 12:31 a.m.28 views

CVE-2024-2153 SourceCodester Online Mobile Management Store view_order.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /admin/orders/vieworder.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS6.8AI score0.0066EPSS
SaveExploits1References3
CVE
CVE
added 2024/03/04 12:31 a.m.74 views

CVE-2024-2153

CVE-2024-2153 affects SourceCodester Online Mobile Management Store 1.0, with SQL injection in the /admin/orders/view_order.php file caused by manipulation of the id parameter. Exploitation appears possible remotely and public disclosure exists (VDB-255585). Public-available sources describe the ...

9.8CVSS7AI score0.0066EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2024/03/04 12:15 a.m.27 views

CVE-2024-2151

A vulnerability classified as problematic was found in SourceCodester Online Mobile Management Store 1.0. Affected by this vulnerability is an unknown functionality of the component Product Price Handler. The manipulation of the argument quantity with the input -1 leads to business logic errors...

5.3CVSS4.7AI score0.00546EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/04 12:15 a.m.10 views

CVE-2024-2152

A vulnerability, which was classified as critical, has been found in SourceCodester Online Mobile Management Store 1.0. Affected by this issue is some unknown functionality of the file /admin/product/manageproduct.php. The manipulation of the argument id leads to sql injection. The attack may be...

9.8CVSS5.7AI score0.00621EPSS
SaveExploits1References3
Prion
Prion
added 2024/03/04 12:15 a.m.39 views

Input validation

A vulnerability classified as problematic was found in SourceCodester Online Mobile Management Store 1.0. Affected by this vulnerability is an unknown functionality of the component Product Price Handler. The manipulation of the argument quantity with the input -1 leads to business logic errors...

4CVSS4.9AI score0.00546EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/03/04 12:00 a.m.23 views

CVE-2024-2152 SourceCodester Online Mobile Management Store manage_product.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Mobile Management Store 1.0. Affected by this issue is some unknown functionality of the file /admin/product/manageproduct.php. The manipulation of the argument id leads to sql injection. The attack may be...

5.8CVSS7.4AI score0.00621EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2024/03/04 12:00 a.m.27 views

openSUSE: Security Advisory for chromium (openSUSE-SU-2023:0249-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS5.7AI score0.00723EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/04 12:00 a.m.12 views

Online Mobile Management Store SQL Injection Vulnerability

Online Mobile Management Store is an online mobile store management system. A SQL injection vulnerability exists in Online Mobile Management Store version 1.0, which originates from a SQL injection vulnerability in the parameter id of the file /admin/orders/vieworder.php...

9.8CVSS7.9AI score0.0066EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/03/04 12:00 a.m.8 views

Online Mobile Management Store SQL Injection Vulnerability

Online Mobile Management Store is an online mobile store management system. A SQL injection vulnerability exists in Online Mobile Management Store version 1.0, which originates from a SQL injection vulnerability in the parameter id of the file viewproduct.php...

9.8CVSS7.9AI score0.00634EPSS
SaveExploits1References4
CVE
CVE
added 2024/03/03 11:31 p.m.84 views

CVE-2024-2151

CVE-2024-2151 affects SourceCodester Online Mobile Management Store 1.0, specifically the Product Price Handler where the quantity argument can be set to -1, leading to business-logic errors. The attack is remote and exploits have been disclosed publicly. The connected documents confirm the issue...

5.3CVSS4.8AI score0.00546EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/03 11:31 p.m.14 views

CVE-2024-2151 SourceCodester Online Mobile Management Store Product Price logic error

A vulnerability classified as problematic was found in SourceCodester Online Mobile Management Store 1.0. Affected by this vulnerability is an unknown functionality of the component Product Price Handler. The manipulation of the argument quantity with the input -1 leads to business logic errors...

4.3CVSS6.9AI score0.00546EPSS
SaveExploits1References3
NVD
NVD
added 2024/03/03 5:15 p.m.30 views

CVE-2024-2147

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely...

9.8CVSS7.5AI score0.00847EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/03 5:15 p.m.11 views

CVE-2024-2147

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely...

9.8CVSS6.8AI score0.00847EPSS
SaveExploits1References3
NVD
NVD
added 2024/03/03 5:15 p.m.19 views

CVE-2024-2148

A vulnerability classified as critical has been found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /classes/Users.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit h...

8.8CVSS6.5AI score0.00832EPSS
SaveExploits1References3
Prion
Prion
added 2024/03/03 5:15 p.m.29 views

Sql injection

A vulnerability was found in SourceCodester Online Mobile Management Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely...

7.5CVSS7.7AI score0.00847EPSS
SaveExploits1References3
Prion
Prion
added 2024/03/03 5:15 p.m.21 views

Design/Logic Flaw

A vulnerability classified as critical has been found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /classes/Users.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit h...

6.5CVSS7.2AI score0.00832EPSS
SaveExploits1References3
Rows per page
Query Builder