Lucene search
+L

1337 matches found

Cvelist
Cvelist
•added 2023/04/10 4:00 p.m.•44 views

CVE-2023-1969 SourceCodester Online Eyewear Shop GET Parameter manage_stock.php sql injection

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file /admin/inventory/managestock.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be...

6.5CVSS10AI score0.00784EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/10 12:00 a.m.•0 views

CVE-2023-1969: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file /admin/inventory/managestock.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be...

9.8CVSS5.5AI score0.00784EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/09 12:00 a.m.•0 views

CVE-2023-1962: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql...

9.8CVSS5.5AI score0.00812EPSS
SaveExploits1References2
Prion
Prion
•added 2023/04/06 1:15 p.m.•23 views

Sql injection

A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/categories/viewcategory.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. ...

6.5CVSS9.7AI score0.00737EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/04/06 12:31 p.m.•54 views

CVE-2023-1908

CVE-2023-1908 affects SourceCodester Simple Mobile Comparison Website 1.0. the vulnerability is in the GET Parameter Handler for the file /admin/categories/view_category.php, where manipulating the argument id leads to SQL injection. This vulnerability can be exploited remotely and has publicly d...

9.8CVSS8.3AI score0.00737EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/06 12:00 a.m.•3 views

CVE-2023-1908: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/categories/viewcategory.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. ...

9.8CVSS5.5AI score0.00737EPSS
SaveExploits1References2
Prion
Prion
•added 2023/04/05 8:15 a.m.•36 views

Sql injection

A vulnerability has been found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/transactions/trackshipment.php of the component GET Parameter Handler. The manipulation of the argument id lea...

6.5CVSS9.7AI score0.00808EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/05 12:00 a.m.•1 views

CVE-2023-1856: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/transactions/trackshipment.php of the component GET Parameter Handler. The manipulation of the argument id lea...

9.8CVSS5.5AI score0.00808EPSS
SaveExploits1References3
Prion
Prion
•added 2023/04/04 10:15 a.m.•26 views

Sql injection

A vulnerability has been found in SourceCodester Centralized Covid Vaccination Records System 1.0 and classified as critical. This vulnerability affects unknown code of the file /vaccinated/admin/maintenance/managelocation.php of the component GET Parameter Handler. The manipulation of the argume...

6.5CVSS9.7AI score0.00726EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/04/04 9:31 a.m.•39 views

CVE-2023-1827 SourceCodester Centralized Covid Vaccination Records System GET Parameter manage_location.php sql injection

A vulnerability has been found in SourceCodester Centralized Covid Vaccination Records System 1.0 and classified as critical. This vulnerability affects unknown code of the file /vaccinated/admin/maintenance/managelocation.php of the component GET Parameter Handler. The manipulation of the argume...

6.5CVSS10AI score0.00726EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/04 12:00 a.m.•0 views

CVE-2023-1827: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Centralized Covid Vaccination Records System 1.0 and classified as critical. This vulnerability affects unknown code of the file /vaccinated/admin/maintenance/managelocation.php of the component GET Parameter Handler. The manipulation of the argume...

9.8CVSS5.5AI score0.00726EPSS
SaveExploits1References2
Prion
Prion
•added 2023/04/02 9:15 a.m.•27 views

Cross site scripting

A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/products/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input...

4CVSS6AI score0.00549EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2023/04/02 8:15 a.m.•33 views

CVE-2023-1794

A vulnerability was found in SourceCodester Police Crime Record Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/casedetails.php of the component GET Parameter Handler. The manipulation of the argument id with the input "alert2...

6.1CVSS4.6AI score0.00549EPSS
SaveExploits1References3
NVD
NVD
•added 2023/04/02 8:15 a.m.•20 views

CVE-2023-1793

A vulnerability was found in SourceCodester Police Crime Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /officer/assigncase.php of the component GET Parameter Handler. The manipulation of the argument caseid leads to sql injection. It is...

9.8CVSS7.4AI score0.00726EPSS
SaveExploits1References3
Prion
Prion
•added 2023/04/02 8:15 a.m.•27 views

Cross site scripting

A vulnerability was found in SourceCodester Police Crime Record Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/casedetails.php of the component GET Parameter Handler. The manipulation of the argument id with the input "alert2...

4CVSS6.1AI score0.00549EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/04/02 8:00 a.m.•46 views

CVE-2023-1794 SourceCodester Police Crime Record Management System GET Parameter casedetails.php cross site scripting

A vulnerability was found in SourceCodester Police Crime Record Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/casedetails.php of the component GET Parameter Handler. The manipulation of the argument id with the input "alert2...

4CVSS6.3AI score0.00549EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/04/02 12:00 a.m.•13 views

Online Ordering System 跨站脚本漏洞

Online Ordering System is a multi-store ordering system for janobe individual developers. It can be used for any small business. A security vulnerability exists in SourceCodester Gadget Works Online Ordering System version 1.0, which stems from unknown processing in the file...

6.1CVSS4.5AI score0.00549EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/02 12:00 a.m.•1 views

CVE-2023-1794: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Police Crime Record Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/casedetails.php of the component GET Parameter Handler. The manipulation of the argument id with the input " leads...

6.1CVSS3.8AI score0.00549EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/02 12:00 a.m.•0 views

CVE-2023-1793: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Police Crime Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /officer/assigncase.php of the component GET Parameter Handler. The manipulation of the argument caseid leads to sql injection. It is...

9.8CVSS5.5AI score0.00726EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/02 12:00 a.m.•0 views

CVE-2023-1795: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/products/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input lead...

6.1CVSS3.8AI score0.00549EPSS
SaveExploits1References3
Rows per page
Query Builder