Lucene search
+L

1337 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/22 12:00 a.m.•1 views

CVE-2023-2243: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file users/registration.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection...

8.8CVSS5.5AI score0.00723EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/22 12:00 a.m.•2 views

CVE-2023-2244: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

9.8CVSS5.5AI score0.00726EPSS
SaveExploits1References2
Prion
Prion
•added 2023/04/18 2:15 p.m.•27 views

Cross site scripting

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/assets/plugins/DataTables/examples/examplessupport/editableajax.php of the component POST Parameter Handler. The...

4CVSS6AI score0.00564EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/04/18 2:00 p.m.•39 views

CVE-2023-2153 SourceCodester Complaint Management System POST Parameter editable_ajax.php cross site scripting

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/assets/plugins/DataTables/examples/examplessupport/editableajax.php of the component POST Parameter Handler. The...

4CVSS6.2AI score0.00564EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/18 12:00 a.m.•0 views

CVE-2023-2153: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/assets/plugins/DataTables/examples/examplessupport/editableajax.php of the component POST Parameter Handler. The...

6.1CVSS3.8AI score0.00564EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/04/18 12:00 a.m.•14 views

PT-2023-18281 · Sourcecodester · Sourcecodester Complaint Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Complaint Management System version 1.0 Description: A problematic issue was found in the SourceCodester Complaint Management System, affecting some unknown functionality of the file...

6.1CVSS4.1AI score0.00564EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2023/04/17 8:00 p.m.•47 views

CVE-2023-2130 SourceCodester Purchase Order Management System GET Parameter view_details.php sql injection

A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0. Affected is an unknown function of the file /admin/suppliers/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is...

6.5CVSS10AI score0.04122EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/17 12:00 a.m.•1 views

CVE-2023-2130: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0. Affected is an unknown function of the file /admin/suppliers/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is...

9.8CVSS5.5AI score0.04122EPSS
SaveExploits1References2
CNVD
CNVD
•added 2023/04/16 12:00 a.m.•74 views

Complaint Management System SQL Injection Vulnerability (CNVD-2023-29364)

Complaint Management System is an open source Php project . Used to request a complaint through the online service . Complaint Management System v1.0 version of the SQL injection vulnerability, the vulnerability stems from the component POST Parameter Handler file/users/checkavailability.php to t...

9.8AI score0.00776EPSS
SaveExploits1Affected Software1
Prion
Prion
•added 2023/04/15 9:15 a.m.•19 views

Sql injection

A vulnerability classified as critical has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is an unknown function of the file /admin/maintenance/viewdesignation.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

6.5CVSS9AI score0.00729EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2023/04/15 8:15 a.m.•36 views

CVE-2023-2089

A vulnerability was found in SourceCodester Complaint Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/userprofile.php of the component GET Parameter Handler. The manipulation of the argument uid leads to sql injection. The attack...

8.8CVSS7.3AI score0.00602EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/04/15 7:07 a.m.•38 views

CVE-2023-2089 SourceCodester Complaint Management System GET Parameter userprofile.php sql injection

A vulnerability was found in SourceCodester Complaint Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/userprofile.php of the component GET Parameter Handler. The manipulation of the argument uid leads to sql injection. The attack...

6.5CVSS9.2AI score0.00602EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/15 12:00 a.m.•1 views

CVE-2023-2089: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Complaint Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/userprofile.php of the component GET Parameter Handler. The manipulation of the argument uid leads to sql injection. The attack...

8.8CVSS5.5AI score0.00602EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/04/15 12:00 a.m.•13 views

PT-2023-17691 · Unknown · Sourcecodester Employee/Visitor Gate Pass Logging System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /admin/maintenance/view designation.php, specifically the component GET...

8.8CVSS7.2AI score0.00729EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/15 12:00 a.m.•2 views

CVE-2023-2090: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is an unknown function of the file /admin/maintenance/viewdesignation.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

8.8CVSS5.5AI score0.00729EPSS
SaveExploits1References2
NVD
NVD
•added 2023/04/11 5:15 p.m.•27 views

CVE-2023-1983

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manageproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

9.8CVSS7.3AI score0.00737EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/04/11 5:00 p.m.•35 views

CVE-2023-1983 SourceCodester Sales Tracker Management System GET Parameter manage_product.php sql injection

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manageproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

6.5CVSS9.9AI score0.00737EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/11 12:00 a.m.•2 views

CVE-2023-1984: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Complaint Management System 1.0. This vulnerability affects unknown code of the file /users/checkavailability.php of the component POST Parameter Handler. The manipulation of the argument email leads to sql injection. The attack c...

9.8CVSS5.5AI score0.00776EPSS
SaveExploits1References2
Prion
Prion
•added 2023/04/10 4:15 p.m.•26 views

Sql injection

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file /admin/inventory/managestock.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be...

6.5CVSS9.7AI score0.00784EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/04/10 4:00 p.m.•76 views

CVE-2023-1969

CVE-2023-1969 affects SourceCodester Online Eyewear Shop 1.0. A SQL injection flaw exists in the GET parameter handler for /admin/inventory/manage_stock.php via the id parameter, exploitable remotely without authentication. Documented exploits and public disclosure are noted. Impact on confidenti...

9.8CVSS8.4AI score0.00784EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder