Lucene search
K

147 matches found

Positive Technologies
Positive Technologies
added 2024/03/12 12:0 a.m.1 views

PT-2024-20268 · Unknown · Code-Projects Scholars Tracking System

Name of the Vulnerable Software and Affected Versions: Code-projects Scholars Tracking System version 1.0 Description: The issue allows attackers to run arbitrary code via the News Feed, potentially leading to the execution of malicious scripts. This is a Cross Site Scripting XSS vulnerability...

5.4CVSS6.8AI score0.00184EPSS
Exploits0References3
CNVD
CNVD
added 2024/03/08 12:0 a.m.15 views

Scholars Tracking System SQL Injection Vulnerability

Scholars Tracking System is a scholars tracking system by the individual developer Fabian Ros. Scholars Tracking System version 1.0 suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements, which can be exploited by an...

9.8CVSS7.7AI score0.00054EPSS
Exploits0References1
OSV
OSV
added 2024/03/05 4:15 p.m.2 views

CVE-2024-24098

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed...

7.8CVSS5.9AI score0.00054EPSS
Exploits0References2
NVD
NVD
added 2024/03/05 4:15 p.m.11 views

CVE-2024-24098

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed...

9.8CVSS7.6AI score0.00054EPSS
Exploits0References2
Prion
Prion
added 2024/03/05 4:15 p.m.13 views

Sql injection

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed...

8.4AI score0.00054EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/03/05 12:0 a.m.14 views

CVE-2024-24098

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed...

8AI score0.00054EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/03/05 12:0 a.m.1 views

PT-2024-20269 · Unknown · Code-Projects Scholars Tracking System

Name of the Vulnerable Software and Affected Versions: Code-projects Scholars Tracking System version 1.0 Description: The issue is related to SQL Injection via the News Feed. Recommendations: For Code-projects Scholars Tracking System version 1.0, as a temporary workaround, consider restricting...

9.8CVSS8.1AI score0.00054EPSS
Exploits0References8
CNNVD
CNNVD
added 2024/03/05 12:0 a.m.1 views

Scholars Tracking System SQL注入漏洞

Scholars Tracking System is a scholars tracking system by the individual developer Fabian Ros. Scholars Tracking System version 1.0 suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements, which can be exploited by an...

9.8CVSS7.9AI score0.00054EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/03/05 12:0 a.m.10 views

CVE-2024-24098

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed...

8AI score0.00054EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/01/30 4:31 a.m.17 views

CVE-2024-1028 SourceCodester Facebook News Feed Like Post cross site scripting

A vulnerability has been found in SourceCodester Facebook News Feed Like 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Post Handler. The manipulation of the argument Description with the input HACKED leads to cross site scripting. T...

4CVSS6.2AI score0.00042EPSS
Exploits0References2
CVE
CVE
added 2024/01/30 4:31 a.m.38 views

CVE-2024-1028

CVE-2024-1028 affects SourceCodester Facebook News Feed Like 1.0. The vulnerability lies in the Post Handler’s Description argument, where input such as HACKED triggers cross-site scripting. Exploitation is reported to be remotely possible and the exploit has been disclosed publicly (VDB-252301)....

6.1CVSS6AI score0.00042EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2024/01/30 3:15 a.m.8 views

CVE-2024-1027

A vulnerability, which was classified as critical, was found in SourceCodester Facebook News Feed Like 1.0. Affected is an unknown function of the component Post Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The identifier of this...

9.8CVSS7.1AI score0.00057EPSS
Exploits0References2
OSV
OSV
added 2024/01/30 3:15 a.m.0 views

CVE-2024-1027

A vulnerability, which was classified as critical, was found in SourceCodester Facebook News Feed Like 1.0. Affected is an unknown function of the component Post Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The identifier of this...

9.8CVSS5.4AI score
Exploits0References2
Prion
Prion
added 2024/01/30 3:15 a.m.14 views

Design/Logic Flaw

A vulnerability, which was classified as critical, was found in SourceCodester Facebook News Feed Like 1.0. Affected is an unknown function of the component Post Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The identifier of this...

6.5CVSS7.2AI score0.00057EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2024/01/30 3:0 a.m.32 views

CVE-2024-1027

CVE-2024-1027 is a vulnerability in the Post Handler of SourceCodester Facebook News Feed Like 1.0. Affected is an unknown function in Post Handler, with an unrestricted file upload vulnerability that can be exploited remotely. Multiple connected sources corroborate the issue, describing a critic...

9.8CVSS9.4AI score0.00057EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/01/30 3:0 a.m.15 views

CVE-2024-1027 SourceCodester Facebook News Feed Like Post unrestricted upload

A vulnerability, which was classified as critical, was found in SourceCodester Facebook News Feed Like 1.0. Affected is an unknown function of the component Post Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The identifier of this...

6.5CVSS9.7AI score0.00057EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/01/30 3:0 a.m.5 views

CVE-2024-1027 SourceCodester Facebook News Feed Like Post unrestricted upload

A vulnerability, which was classified as critical, was found in SourceCodester Facebook News Feed Like 1.0. Affected is an unknown function of the component Post Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The identifier of this...

6.5CVSS7.3AI score0.00057EPSS
Exploits0References2
Prion
Prion
added 2024/01/30 1:15 a.m.11 views

Cross site scripting

A vulnerability has been found in SourceCodester Facebook News Feed Like 1.0 and classified as problematic. This vulnerability affects unknown code of the component New Account Handler. The manipulation of the argument First Name/Last Name with the input alert1 leads to cross site scripting. The...

4CVSS6.6AI score0.00064EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/30 12:31 a.m.10 views

CVE-2024-1024 SourceCodester Facebook News Feed Like New Account cross site scripting

A vulnerability has been found in SourceCodester Facebook News Feed Like 1.0 and classified as problematic. This vulnerability affects unknown code of the component New Account Handler. The manipulation of the argument First Name/Last Name with the input alert1 leads to cross site scripting. The...

4CVSS6.6AI score0.00064EPSS
Exploits0References2
CVE
CVE
added 2024/01/30 12:31 a.m.40 views

CVE-2024-1024

CVE-2024-1024 affects SourceCodester Facebook News Feed Like 1.0, specifically the New Account Handler component. The vulnerability is a cross-site scripting flaw triggered by unvalidated input in the First Name/Last Name field (example payload: ), allowing remote initiation. Multiple sources cor...

6.1CVSS6AI score0.00064EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder