Lucene search
K

982 matches found

CNNVD
CNNVD
added 2023/05/20 12:0 a.m.2 views

SourceCodester Class Scheduling System SQL注入漏洞

Class Scheduling System is a class scheduling system by jkev individual developer. A SQL injection vulnerability exists in SourceCodester Class Scheduling System version 1.0, which is caused by an unknown function in the file /admin/editsubject.php in the component GET Parameter Handler, which...

9.8CVSS7AI score0.00297EPSS
Exploits1References4
OSV
OSV
added 2023/05/19 5:15 p.m.1 views

CVE-2023-2814

A vulnerability classified as problematic has been found in SourceCodester Class Scheduling System 1.0. Affected is an unknown function of the file /admin/saveteacher.php of the component POST Parameter Handler. The manipulation of the argument AcademicRank leads to cross site scripting. It is...

6.1CVSS3.9AI score0.0025EPSS
Exploits1References3
NVD
NVD
added 2023/05/19 5:15 p.m.8 views

CVE-2023-2815

A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can ...

9.8CVSS7.4AI score0.00297EPSS
Exploits1References3
OSV
OSV
added 2023/05/19 5:15 p.m.1 views

CVE-2023-2815

A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can ...

9.8CVSS5.7AI score
Exploits0References3
NVD
NVD
added 2023/05/19 5:15 p.m.8 views

CVE-2023-2814

A vulnerability classified as problematic has been found in SourceCodester Class Scheduling System 1.0. Affected is an unknown function of the file /admin/saveteacher.php of the component POST Parameter Handler. The manipulation of the argument AcademicRank leads to cross site scripting. It is...

6.1CVSS4.5AI score0.0025EPSS
Exploits1References3
Prion
Prion
added 2023/05/19 5:15 p.m.17 views

Sql injection

A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can ...

6.5CVSS9.7AI score0.00297EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/05/19 4:0 p.m.53 views

CVE-2023-2814

SourceCodester Class Scheduling System 1.0 contains a cross-site scripting vulnerability in the POST Parameter Handler, specifically via the Academic_Rank parameter in /admin/save_teacher.php. The flaw arises from insufficient input filtering/escaping, allowing remote attackers to inject arbitrar...

6.1CVSS4.8AI score0.0025EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/05/19 4:0 p.m.16 views

CVE-2023-2814 SourceCodester Class Scheduling System POST Parameter save_teacher.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Class Scheduling System 1.0. Affected is an unknown function of the file /admin/saveteacher.php of the component POST Parameter Handler. The manipulation of the argument AcademicRank leads to cross site scripting. It is...

4CVSS6.2AI score0.0025EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/05/19 12:0 a.m.2 views

PT-2023-21588 · Sourcecodester · Sourcecodester Class Scheduling System

Name of the Vulnerable Software and Affected Versions: SourceCodester Class Scheduling System version 1.0 Description: A problematic vulnerability has been found in the SourceCodester Class Scheduling System. The issue affects an unknown function of the file /admin/save teacher.php, specifically...

6.1CVSS4.3AI score0.0025EPSS
Exploits1References5
CNNVD
CNNVD
added 2023/05/19 12:0 a.m.1 views

SourceCodester Class Scheduling System 跨站脚本漏洞

Class Scheduling System is a class scheduling system. A cross-site scripting vulnerability exists in Class Scheduling System v1.0, which originates from the lack of effective filtering and escaping of user-supplied data in the AcademicRank parameter of the file /admin/saveteacher.php in the...

6.1CVSS6.1AI score0.0025EPSS
Exploits1References4
Prion
Prion
added 2023/05/16 5:15 p.m.10 views

Cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Guest Management System 1.0. Affected by this issue is some unknown functionality of the file dateTest.php of the component GET Parameter Handler. The manipulation of the argument name leads to cross site...

4CVSS5.9AI score0.0025EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/16 4:31 p.m.12 views

CVE-2023-2740 SourceCodester Guest Management System GET Parameter dateTest.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Guest Management System 1.0. Affected by this issue is some unknown functionality of the file dateTest.php of the component GET Parameter Handler. The manipulation of the argument name leads to cross site...

4CVSS6.2AI score0.0025EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/05/16 4:31 p.m.11 views

CVE-2023-2740 SourceCodester Guest Management System GET Parameter dateTest.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Guest Management System 1.0. Affected by this issue is some unknown functionality of the file dateTest.php of the component GET Parameter Handler. The manipulation of the argument name leads to cross site...

4CVSS6.2AI score0.0025EPSS
Exploits0References3
Prion
Prion
added 2023/05/14 12:15 p.m.19 views

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Lost and Found Information System 1.0. Affected by this issue is some unknown functionality of the file admin/?page=items/viewitem of the component GET Parameter Handler. The manipulation of the argument id leads ...

6.5CVSS9.6AI score0.00316EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2023/05/14 11:15 a.m.9 views

CVE-2023-2695

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /kelas/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack can be...

9.8CVSS7.5AI score0.00316EPSS
Exploits1References3
OSV
OSV
added 2023/05/14 11:15 a.m.1 views

CVE-2023-2695

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /kelas/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack can be...

9.8CVSS6.5AI score0.00316EPSS
Exploits1References3
Prion
Prion
added 2023/05/14 11:15 a.m.10 views

Sql injection

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /kelas/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack can be...

6.5CVSS9.7AI score0.00316EPSS
Exploits1References3Affected Software1
Prion
Prion
added 2023/05/14 11:15 a.m.9 views

Sql injection

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack may be...

6.5CVSS9.7AI score0.00316EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/05/14 11:0 a.m.16 views

CVE-2023-2696 SourceCodester Online Exam System POST Parameter data sql injection

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack may be...

6.5CVSS10AI score0.00316EPSS
Exploits1References3
Prion
Prion
added 2023/05/14 10:15 a.m.10 views

Sql injection

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been classified as critical. This affects an unknown part of the file /dosen/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to initiate th...

6.5CVSS9.7AI score0.00316EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder