Lucene search
+L

2772 matches found

CNNVD
CNNVD
added 2023/04/02 12:0 a.m.5 views

SourceCodester Police Crime Record Management System 跨站脚本漏洞

Police Crime Record Management System is a Police Crime Record Management System by Osman Yahaya Individual Developer. A security vulnerability exists in SourceCodester Police Crime Record Management System version 1.0 due to unknown code in the file /admin/casedetails.php of the component GET...

6.1CVSS4.5AI score0.00549EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/03/30 12:0 a.m.9 views

PT-2023-17203 · Sourcecodester · Sourcecodester Young Entrepreneur E-Negosyo System

Name of the Vulnerable Software and Affected Versions: SourceCodester Young Entrepreneur E-Negosyo System version 1.0 Description: A critical issue has been found in the system, affecting the file index.php?q=product. The manipulation of the search argument leads to SQL injection. The attack can ...

9.8CVSS8.1AI score0.00492EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/03/30 12:0 a.m.5 views

Young Entrepreneur E-Negosyo System 代码问题漏洞

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in version 1.0 of the SourceCodester Young Entrepreneur E-Negosyo System that stems from an incorrect manipulation of the parameter image resulting in...

9.8CVSS7.5AI score0.00623EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/30 12:0 a.m.6 views

Young Entrepreneur E-Negosyo System SQL注入漏洞

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in SourceCodester Young Entrepreneur E-Negosyo System version 1.0, which stems from an incorrect manipulation of the parameter search resulting in sql...

9.8CVSS6.9AI score0.00492EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/30 12:0 a.m.5 views

Young Entrepreneur E-Negosyo System SQL注入漏洞

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in SourceCodester Young Entrepreneur E-Negosyo System version 1.0, which stems from an incorrect manipulation of the parameter UUSERNAME resulting in sql...

9.8CVSS7.5AI score0.00554EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/03/28 12:0 a.m.9 views

PT-2023-17157 · Sourcecodester · School Registration/Fee System

Name of the Vulnerable Software and Affected Versions: SourceCodester School Registration and Fee System version 1.0 Description: A critical issue affects the processing of the file /bilal final/login.php of the component POST Parameter Handler. The manipulation of the username argument leads to...

9.8CVSS7.8AI score0.00863EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/03/27 12:0 a.m.11 views

SourceCodester Water Billing System 跨站脚本漏洞

SourceCodester Water Billing System is a water billing system from SourceCodester, Inc. in the United States. A security vulnerability exists in SourceCodester Water Billing System v1.0, which stems from a cross-site scripting XSS vulnerability...

6.1CVSS5.9AI score0.0044EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/03/27 12:0 a.m.17 views

PT-2023-20877 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: Phpgurukul Park Ticketing Management System version 1.0 Description: The issue is related to SQL Injection via the User Name parameter. This allows for potential exploitation. No information is provided about the estimated number of potential...

9.8CVSS9.6AI score0.00839EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/03/24 12:0 a.m.7 views

PT-2023-21025 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Loan Management System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the Type parameter under the Edit Loan Types module. Recommendations: For...

5.4CVSS6.1AI score0.00427EPSS
SaveExploits1References5
OSV
OSV
added 2023/03/23 1:15 a.m.9 views

CVE-2023-24655

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function...

9.8CVSS5.8AI score0.01023EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/03/23 12:0 a.m.7 views

Automatic Question Paper Generator System SQL注入漏洞

Automatic Question Paper Generator System is an automatic question paper generator system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Automatic Question Paper Generator System version 1.0, which stems from a problem with the file...

9.8CVSS7AI score0.00541EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/03/23 12:0 a.m.6 views

PT-2023-17102 · Sourcecodester · Sourcecodester Automatic Question Paper Generator System

Name of the Vulnerable Software and Affected Versions: SourceCodester Automatic Question Paper Generator System version 1.0 Description: A problematic issue has been found in the system, affecting the processing of the file classes/Master.php?f=save class. The manipulation of the description...

6.1CVSS4.3AI score0.00388EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/03/22 12:0 a.m.6 views

vox2mesh 缓冲区错误漏洞

vox2mesh is a simple program to convert .vox files to obj file format by the individual developer Cedric Pinson. A security vulnerability exists in vox2mesh version 1.0, which stems from the presence of a stack overflow vulnerability that can be exploited by an attacker to cause a denial of servi...

5.5CVSS5.8AI score0.00333EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/03/20 12:0 a.m.6 views

E-Commerce System SQL注入漏洞

Moosikay E-Commerce System is an e-commerce system by the individual developer Arvin Arandilla. A SQL injection vulnerability exists in E-Commerce System version 1.0, which stems from an incorrect manipulation of the parameter id resulting in sql injection...

8.1CVSS6.5AI score0.00551EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/03/19 12:0 a.m.4 views

Simple and Nice Shopping Cart Script 代码问题漏洞

Simple and Nice Shopping Cart Script is simple and nice PHP shopping cart script. A vulnerability exists in SourceCodester Simple and Nice Shopping Cart Script version 1.0, which stems from a problem with the file uploaderm.php, where the operation of the parameter submit results in unrestricted...

9.8CVSS6.9AI score0.0072EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/03/17 12:0 a.m.4 views

PT-2023-17006 · Sourcecodester · Sourcecodester Student Study Center Desk Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Study Center Desk Management System version 1.0 Description: A critical vulnerability was found in the Report Handler component of the system. The issue affects an unknown functionality of the file...

9.8CVSS7.1AI score0.00541EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/03/17 12:0 a.m.7 views

PT-2023-16984 · Sourcecodester · Sourcecodester Automatic Question Paper Generator System

Name of the Vulnerable Software and Affected Versions: SourceCodester Automatic Question Paper Generator System version 1.0 Description: A critical issue was found in the GET Parameter Handler component of the users/user/manage user.php file. The manipulation of the id argument leads to SQL...

8.8CVSS7AI score0.00782EPSS
SaveExploits1References6
OSV
OSV
added 2023/03/15 2:15 p.m.8 views

CVE-2023-24728

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function...

8.8CVSS7.3AI score0.01006EPSS
SaveExploits1References3
OSV
OSV
added 2023/03/14 3:15 p.m.7 views

CVE-2023-27073

A Cross-Site Request Forgery CSRF in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request...

6.5CVSS6.7AI score0.00262EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/14 9:15 a.m.3 views

CVE-2022-47147

Cross-Site Request Forgery CSRF vulnerability in Kesz1 Technologies ipBlockList plugin = 1.0 versions...

8.8CVSS5.8AI score0.00269EPSS
SaveExploits0References1
Rows per page
Query Builder