Lucene search
+L

1948 matches found

CNNVD
CNNVD
added 2024/06/12 12:00 a.m.9 views

Employee and Visitor Gate Pass Logging System SQL Injection Vulnerability

Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system developed by Carlo Montero. An SQL injection vulnerability exists in Employee and Visitor Gate Pass Logging System version 1.0 due to an unknown part of the deleteusers function in /classes/Users.php, whi...

9.8CVSS8AI score0.00612EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/06/12 12:00 a.m.9 views

PT-2024-37230 · Sourcecodester · Sourcecodester Employee/Visitor Gate Pass Logging System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description: A critical issue has been found in the system, affecting the delete users function of the file /classes/Users.php?f=delete. The manipulation of the id...

9.8CVSS7.2AI score0.00612EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/06/12 12:00 a.m.6 views

Employee and Visitor Gate Pass Logging System Cross-Site Scripting Vulnerability

Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system developed by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in Employee and Visitor Gate Pass Logging System version 1.0, which originates from an unknown function in...

6.9CVSS6.2AI score0.00617EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/06/12 12:00 a.m.19 views

PT-2024-37231 · Sourcecodester · Employee/Visitor Gate Pass Logging System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description: A critical issue was found in the save users function of the /classes/Users.php file, specifically in the id argument, which leads to sql injection. This...

9.8CVSS7.6AI score0.00682EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2024/06/12 12:00 a.m.7 views

PT-2024-37232 · Unknown · Sourcecodester Employee/Visitor Gate Pass Logging System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description: A vulnerability has been found in the system, classified as problematic. It affects an unknown functionality of the file /classes/Master.php?f=log visitor...

6.9CVSS4.7AI score0.00617EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/06/12 12:00 a.m.74 views

Employee and Visitor Gate Pass Logging System SQL Injection Vulnerability

Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system developed by Carlo Montero. An SQL injection vulnerability exists in Employee and Visitor Gate Pass Logging System version 1.0, which is caused by an unknown part of the saveusers function in...

9.8CVSS8AI score0.00682EPSS
SaveExploits1References5
zdt
zdt
added 2024/06/04 12:00 a.m.376 views

Employee And Visitor Gate Pass Logging System 1.0 SQL Injection Vulnerability

Employee and Visitor Gate Pass Logging System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass. Exploit Title: Employee and Visitor Gate Pass Logging System - SQLi Authentication Bypass Exploit Author: Furkan Eren Tetik Vendor Homepage:...

8.7AI score
SaveExploits0
CNNVD
CNNVD
added 2024/05/24 12:00 a.m.5 views

AVTECH Software Room Alert 4E 安全漏洞

AVTECH Software Room Alert 4E is an environmental monitoring device from AVTECH Software. A security vulnerability exists in AVTECH Software Room Alert 4E version v4.4.0, which originated from a vulnerability that allows an attacker to gain access to plaintext credentials via a pass-back attack...

4.9CVSS6.9AI score0.0024EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/21 4:15 p.m.7 views

UBUNTU-CVE-2022-48707

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix null pointer dereference for resetting decoder Not all decoders have a reset callback. The CXL specification allows a host bridge with a single root port to have no explicit HDM decoders. Currently the region driv...

5.5CVSS5.7AI score0.00205EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/05/21 3:30 p.m.47 views

CVE-2023-52779 fs: Pass AT_GETATTR_NOSEC flag to getattr interface function

In the Linux kernel, the following vulnerability has been resolved: fs: Pass ATGETATTRNOSEC flag to getattr interface function When vfsgetattrnosec calls a filesystem's getattr interface function then the 'nosec' should propagate into this function so that vfsgetattrnosec can again be called from...

6.4AI score0.00208EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/17 3:15 p.m.3 views

DEBIAN-CVE-2023-52698

In the Linux kernel, the following vulnerability has been resolved: calipso: fix memory leak in netlblcalipsoaddpass If IPv6 support is disabled at boot ipv6.disable=1, the calipsoinit - netlblcalipsoopsregister function isn't called, and the netlblcalipsoopsget function always returns NULL. In...

5.5CVSS5.6AI score0.00221EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/16 12:15 p.m.7 views

CVE-2024-4991

Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/modpass/aksipass.php parameter in namalengkap. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the system and retrieve all the information stored in it...

9.8CVSS5.9AI score0.00487EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/16 1:15 a.m.27 views

CVE-2024-4921

A vulnerability classified as critical has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is an unknown function of the file /employeegatepass/classes/Users.php?f=ssave. The manipulation of the argument img leads to unrestricted upload. It is possible to...

9.8CVSS6.5AI score0.00674EPSS
SaveExploits1References4
OSV
OSV
added 2024/05/16 1:15 a.m.8 views

CVE-2024-4921

A vulnerability classified as critical has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is an unknown function of the file /employeegatepass/classes/Users.php?f=ssave. The manipulation of the argument img leads to unrestricted upload. It is possible to...

9.8CVSS5.4AI score0.00674EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/05/16 12:31 a.m.41 views

CVE-2024-4921 SourceCodester Employee and Visitor Gate Pass Logging System unrestricted upload

A vulnerability classified as critical has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is an unknown function of the file /employeegatepass/classes/Users.php?f=ssave. The manipulation of the argument img leads to unrestricted upload. It is possible to...

6.5CVSS6.8AI score0.00674EPSS
SaveExploits1References4
CVE
CVE
added 2024/05/16 12:31 a.m.61 views

CVE-2024-4921

CVE-2024-4921 affects the SourceCodester Employee and Visitor Gate Pass Logging System 1.0. The vulnerability is in an unknown function of the file /employee_gatepass/classes/Users.php?f=ssave, where manipulation of the img parameter enables unrestricted upload. This can be exploited remotely, an...

9.8CVSS6.9AI score0.00674EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/16 12:00 a.m.9 views

PT-2024-33348 · Sourcecodester · Sourcecodester Employee/Visitor Gate Pass Logging System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description: A critical vulnerability has been found in the system, affecting an unknown function of the file /employee gatepass/classes/Users.php?f=ssave. The...

9.8CVSS6.6AI score0.00674EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2024/05/16 12:00 a.m.10 views

Employee and Visitor Gate Pass Logging System Code Issue Vulnerability

Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system developed by Carlo Montero. A code issue exists in Employee and Visitor Gate Pass Logging System version 1.0 where an incorrect manipulation of the parameter img results in an unrestricted upload...

9.8CVSS7AI score0.00674EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.9 views

Gescen SQL注入漏洞

Gescen is an educational platform from the Centros Digitales team in China. Gescen suffers from a SQL injection vulnerability that originates from allowing an attacker to send a specially crafted SQL query to the pass parameter and retrieve all data stored in the database...

9.8CVSS7.8AI score0.00504EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/05/03 12:00 a.m.11 views

PT-2024-31202 · Gescen · Gescen

Name of the Vulnerable Software and Affected Versions: Gescen affected versions not specified Description: The issue allows an attacker to send a specially crafted SQL query to the pass parameter and retrieve all the data stored in the database. This is a SQL injection vulnerability...

9.8CVSS7.6AI score0.00504EPSS
SaveExploits0References3
Rows per page
Query Builder