Lucene search
+L

1348 matches found

Positive Technologies
Positive Technologies
•added 2023/05/09 12:00 a.m.•18 views

PT-2023-20380 · Sourcecodester · Sourcecodester Billing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Billing Management System version 1.0 Description: A critical issue has been found in the SourceCodester Billing Management System, affecting an unknown functionality of the file ajax service.php of the component POST Parameter...

9.8CVSS7.6AI score0.00827EPSS
SaveExploits1References5
Prion
Prion
•added 2023/05/07 3:15 p.m.•25 views

Cross site scripting

A vulnerability has been found in SourceCodester Multi Language Hotel Management Software 1.0 and classified as problematic. This vulnerability affects unknown code of the file ajax.php of the component POST Parameter Handler. The manipulation of the argument complainttype with the input...

4CVSS6.1AI score0.00549EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/07 12:00 a.m.•3 views

CVE-2023-2565: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Multi Language Hotel Management Software 1.0 and classified as problematic. This vulnerability affects unknown code of the file ajax.php of the component POST Parameter Handler. The manipulation of the argument complainttype with the input leads to...

6.1CVSS3.8AI score0.00549EPSS
SaveExploits1References3
Prion
Prion
•added 2023/05/06 1:15 a.m.•28 views

Sql injection

A vulnerability was found in PHP-Login 1.0. It has been declared as critical. This vulnerability affects the function checkLogin of the file login/scripts/class.loginscript.php of the component POST Parameter Handler. The manipulation of the argument myusername leads to sql injection. The attack...

7.5CVSS7.9AI score0.00768EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2023/05/06 12:31 a.m.•33 views

CVE-2016-15031 PHP-Login POST Parameter class.loginscript.php checkLogin sql injection

A vulnerability was found in PHP-Login 1.0. It has been declared as critical. This vulnerability affects the function checkLogin of the file login/scripts/class.loginscript.php of the component POST Parameter Handler. The manipulation of the argument myusername leads to sql injection. The attack...

7.5CVSS9.9AI score0.00768EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/06 12:00 a.m.•4 views

CVE-2016-15031: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHP-Login 1.0. It has been declared as critical. This vulnerability affects the function checkLogin of the file login/scripts/class.loginscript.php of the component POST Parameter Handler. The manipulation of the argument myusername leads to sql injection. The attack...

9.8CVSS5.3AI score0.00768EPSS
SaveExploits0References2
NVD
NVD
•added 2023/05/01 4:15 p.m.•26 views

CVE-2023-2451

A vulnerability was found in SourceCodester Online DJ Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/bookings/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...

9.8CVSS7.4AI score0.0072EPSS
SaveExploits1References3
Prion
Prion
•added 2023/05/01 4:15 p.m.•23 views

Sql injection

A vulnerability was found in SourceCodester Online DJ Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/bookings/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...

6.5CVSS9.7AI score0.0072EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/05/01 4:00 p.m.•38 views

CVE-2023-2451 SourceCodester Online DJ Management System GET Parameter view_details.php sql injection

A vulnerability was found in SourceCodester Online DJ Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/bookings/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...

6.5CVSS10AI score0.0072EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/05/01 12:00 a.m.•9 views

PT-2023-19656 · Sourcecodester · Sourcecodester Online Dj Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online DJ Management System version 1.0 Description: A critical issue affects the processing of the file /admin/bookings/view details.php, specifically the GET Parameter Handler component. The manipulation of the id argument...

9.8CVSS6.9AI score0.0072EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/01 12:00 a.m.•2 views

CVE-2023-2451: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online DJ Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/bookings/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...

9.8CVSS5.5AI score0.0072EPSS
SaveExploits1References2
Prion
Prion
•added 2023/04/28 2:15 p.m.•27 views

Sql injection

A vulnerability classified as critical has been found in SourceCodester Online DJ Management System 1.0. Affected is an unknown function of the file admin/events/manageevent.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

6.5CVSS9.7AI score0.00881EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2023/04/28 2:15 p.m.•23 views

Sql injection

A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/inquiries/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

6.5CVSS9.7AI score0.00834EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/04/28 1:31 p.m.•40 views

CVE-2023-2371 SourceCodester Online DJ Management System GET Parameter view_details.php sql injection

A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/inquiries/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

6.5CVSS10AI score0.00834EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•4 views

CVE-2023-2371: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/inquiries/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

9.8CVSS5.5AI score0.00834EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•0 views

CVE-2023-2370: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Online DJ Management System 1.0. Affected is an unknown function of the file admin/events/manageevent.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

9.8CVSS5.5AI score0.00881EPSS
SaveExploits1References2
NVD
NVD
•added 2023/04/22 5:15 p.m.•41 views

CVE-2023-2244

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

9.8CVSS7.4AI score0.00726EPSS
SaveExploits1References3
Prion
Prion
•added 2023/04/22 5:15 p.m.•31 views

Sql injection

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

6.5CVSS9.7AI score0.00726EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/04/22 4:31 p.m.•75 views

CVE-2023-2244

CVE-2023-2244 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability is a SQL injection in the GET Parameter Handler of the file /admin/orders/update_status.php, caused by manipulation of the id parameter. It can be exploited remotely; exploitation has been disclosed publicly (VDB-2272...

9.8CVSS8.3AI score0.00726EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/04/22 4:31 p.m.•36 views

CVE-2023-2243 SourceCodester Complaint Management System POST Parameter registration.php sql injection

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file users/registration.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection...

6.5CVSS9.1AI score0.00723EPSS
SaveExploits1References3
Rows per page
Query Builder