147 matches found
PT-2024-20268 · Unknown · Code-Projects Scholars Tracking System
Name of the Vulnerable Software and Affected Versions: Code-projects Scholars Tracking System version 1.0 Description: The issue allows attackers to run arbitrary code via the News Feed, potentially leading to the execution of malicious scripts. This is a Cross Site Scripting XSS vulnerability...
Scholars Tracking System SQL Injection Vulnerability
Scholars Tracking System is a scholars tracking system by the individual developer Fabian Ros. Scholars Tracking System version 1.0 suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements, which can be exploited by an...
CVE-2024-24098
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed...
CVE-2024-24098
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed...
Sql injection
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed...
CVE-2024-24098
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed...
PT-2024-20269 · Unknown · Code-Projects Scholars Tracking System
Name of the Vulnerable Software and Affected Versions: Code-projects Scholars Tracking System version 1.0 Description: The issue is related to SQL Injection via the News Feed. Recommendations: For Code-projects Scholars Tracking System version 1.0, as a temporary workaround, consider restricting...
Scholars Tracking System SQL注入漏洞
Scholars Tracking System is a scholars tracking system by the individual developer Fabian Ros. Scholars Tracking System version 1.0 suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements, which can be exploited by an...
CVE-2024-24098
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed...
CVE-2024-1028 SourceCodester Facebook News Feed Like Post cross site scripting
A vulnerability has been found in SourceCodester Facebook News Feed Like 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Post Handler. The manipulation of the argument Description with the input HACKED leads to cross site scripting. T...
CVE-2024-1028
CVE-2024-1028 affects SourceCodester Facebook News Feed Like 1.0. The vulnerability lies in the Post Handler’s Description argument, where input such as HACKED triggers cross-site scripting. Exploitation is reported to be remotely possible and the exploit has been disclosed publicly (VDB-252301)....
CVE-2024-1027
A vulnerability, which was classified as critical, was found in SourceCodester Facebook News Feed Like 1.0. Affected is an unknown function of the component Post Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The identifier of this...
CVE-2024-1027
A vulnerability, which was classified as critical, was found in SourceCodester Facebook News Feed Like 1.0. Affected is an unknown function of the component Post Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The identifier of this...
Design/Logic Flaw
A vulnerability, which was classified as critical, was found in SourceCodester Facebook News Feed Like 1.0. Affected is an unknown function of the component Post Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The identifier of this...
CVE-2024-1027
CVE-2024-1027 is a vulnerability in the Post Handler of SourceCodester Facebook News Feed Like 1.0. Affected is an unknown function in Post Handler, with an unrestricted file upload vulnerability that can be exploited remotely. Multiple connected sources corroborate the issue, describing a critic...
CVE-2024-1027 SourceCodester Facebook News Feed Like Post unrestricted upload
A vulnerability, which was classified as critical, was found in SourceCodester Facebook News Feed Like 1.0. Affected is an unknown function of the component Post Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The identifier of this...
CVE-2024-1027 SourceCodester Facebook News Feed Like Post unrestricted upload
A vulnerability, which was classified as critical, was found in SourceCodester Facebook News Feed Like 1.0. Affected is an unknown function of the component Post Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The identifier of this...
Cross site scripting
A vulnerability has been found in SourceCodester Facebook News Feed Like 1.0 and classified as problematic. This vulnerability affects unknown code of the component New Account Handler. The manipulation of the argument First Name/Last Name with the input alert1 leads to cross site scripting. The...
CVE-2024-1024 SourceCodester Facebook News Feed Like New Account cross site scripting
A vulnerability has been found in SourceCodester Facebook News Feed Like 1.0 and classified as problematic. This vulnerability affects unknown code of the component New Account Handler. The manipulation of the argument First Name/Last Name with the input alert1 leads to cross site scripting. The...
CVE-2024-1024
CVE-2024-1024 affects SourceCodester Facebook News Feed Like 1.0, specifically the New Account Handler component. The vulnerability is a cross-site scripting flaw triggered by unvalidated input in the First Name/Last Name field (example payload: ), allowing remote initiation. Multiple sources cor...