Lucene search
+L

27 matches found

CVE
CVE
•added 2022/10/13 12:00 a.m.•81 views

CVE-2022-41533

The CVE-2022-41533 entry concerns Online Diagnostic Lab Management System v1.0, with an arbitrary file upload vulnerability in the /php_action/editProductImage.php component that enables arbitrary PHP code execution. Affected software is explicitly stated as Online Diagnostic Lab Management Syste...

7.2CVSS7.6AI score0.01057EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/07 12:00 a.m.•5 views

CVE-2022-41512: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /phpaction/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.2CVSS7.6AI score0.01251EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/30 12:00 a.m.•4 views

CVE-2022-41437: Unrestricted Upload of File with Dangerous Type

Billing System Project v1.0 was discovered to contain a remote code execution RCE vulnerability via the component /phpaction/createProduct.php...

7.2CVSS7.6AI score0.01724EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/31 12:00 a.m.•5 views

CVE-2022-36582: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /phpaction/createProduct.php of Garage Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

7.2CVSS7.6AI score0.01412EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/29 12:00 a.m.•9 views

CVE-2022-2579: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Garage Management System 1.0. Affected is an unknown function of the file /phpaction/createUser.php. The manipulation of the argument userName with the input lala leads to cross site scripting. It is possible to...

5.4CVSS4.2AI score0.00558EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/29 12:00 a.m.•7 views

CVE-2022-2578: Improper Access Control

A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0. This issue affects some unknown processing of the file /phpaction/createUser.php. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit...

9.8CVSS7.8AI score0.00711EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/20 12:00 a.m.•4 views

CVE-2022-30887: Unrestricted Upload of File with Dangerous Type

Pharmacy Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the component /phpaction/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted image file...

9.8CVSS8.9AI score0.2583EPSS
SaveExploits2References2
Rows per page
Query Builder