Lucene search
+L

313 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/20 12:00 a.m.•3 views

CVE-2023-2824: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/service.php of the component POST Parameter Handler. The manipulation of the argument service lea...

6.1CVSS3.8AI score0.0057EPSS
SaveExploits1References3
OSV
OSV
•added 2023/05/19 5:15 p.m.•11 views

CVE-2023-2815

A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can ...

9.8CVSS5.7AI score0.00726EPSS
SaveExploits1References3
NVD
NVD
•added 2023/05/19 5:15 p.m.•34 views

CVE-2023-2815

A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can ...

9.8CVSS7.4AI score0.00726EPSS
SaveExploits1References3
OSV
OSV
•added 2023/05/19 5:15 p.m.•15 views

CVE-2023-2814

A vulnerability classified as problematic has been found in SourceCodester Class Scheduling System 1.0. Affected is an unknown function of the file /admin/saveteacher.php of the component POST Parameter Handler. The manipulation of the argument AcademicRank leads to cross site scripting. It is...

6.1CVSS3.9AI score0.0059EPSS
SaveExploits1References3
NVD
NVD
•added 2023/05/19 5:15 p.m.•31 views

CVE-2023-2814

A vulnerability classified as problematic has been found in SourceCodester Class Scheduling System 1.0. Affected is an unknown function of the file /admin/saveteacher.php of the component POST Parameter Handler. The manipulation of the argument AcademicRank leads to cross site scripting. It is...

6.1CVSS4.5AI score0.0059EPSS
SaveExploits1References3
Prion
Prion
•added 2023/05/19 5:15 p.m.•28 views

Sql injection

A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can ...

6.5CVSS9.7AI score0.00726EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/05/19 4:00 p.m.•75 views

CVE-2023-2814

SourceCodester Class Scheduling System 1.0 contains a cross-site scripting vulnerability in the POST Parameter Handler, specifically via the Academic_Rank parameter in /admin/save_teacher.php. The flaw arises from insufficient input filtering/escaping, allowing remote attackers to inject arbitrar...

6.1CVSS4.8AI score0.0059EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/05/19 4:00 p.m.•45 views

CVE-2023-2814 SourceCodester Class Scheduling System POST Parameter save_teacher.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Class Scheduling System 1.0. Affected is an unknown function of the file /admin/saveteacher.php of the component POST Parameter Handler. The manipulation of the argument AcademicRank leads to cross site scripting. It is...

4CVSS6.2AI score0.0059EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/05/19 12:00 a.m.•18 views

PT-2023-21588 · Sourcecodester · Sourcecodester Class Scheduling System

Name of the Vulnerable Software and Affected Versions: SourceCodester Class Scheduling System version 1.0 Description: A problematic vulnerability has been found in the SourceCodester Class Scheduling System. The issue affects an unknown function of the file /admin/save teacher.php, specifically...

6.1CVSS4.3AI score0.0059EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/19 12:00 a.m.•1 views

CVE-2023-2815: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can ...

9.8CVSS5.5AI score0.00726EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/19 12:00 a.m.•2 views

CVE-2023-2814: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in SourceCodester Class Scheduling System 1.0. Affected is an unknown function of the file /admin/saveteacher.php of the component POST Parameter Handler. The manipulation of the argument AcademicRank leads to cross site scripting. It is...

6.1CVSS4AI score0.0059EPSS
SaveExploits1References2
OSV
OSV
•added 2023/05/14 11:15 a.m.•20 views

CVE-2023-2695

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /kelas/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack can be...

9.8CVSS6.5AI score0.0082EPSS
SaveExploits1References3
NVD
NVD
•added 2023/05/14 11:15 a.m.•30 views

CVE-2023-2695

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /kelas/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack can be...

9.8CVSS7.5AI score0.0082EPSS
SaveExploits1References3
Prion
Prion
•added 2023/05/14 11:15 a.m.•26 views

Sql injection

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /kelas/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack can be...

6.5CVSS9.7AI score0.0082EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2023/05/14 11:15 a.m.•22 views

Sql injection

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack may be...

6.5CVSS9.7AI score0.0082EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/05/14 11:00 a.m.•41 views

CVE-2023-2696 SourceCodester Online Exam System POST Parameter data sql injection

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack may be...

6.5CVSS10AI score0.0082EPSS
SaveExploits1References3
Prion
Prion
•added 2023/05/14 10:15 a.m.•24 views

Sql injection

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been classified as critical. This affects an unknown part of the file /dosen/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to initiate th...

6.5CVSS9.7AI score0.0082EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/05/14 10:00 a.m.•45 views

CVE-2023-2694 SourceCodester Online Exam System POST Parameter data sql injection

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been classified as critical. This affects an unknown part of the file /dosen/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to initiate th...

6.5CVSS10AI score0.0082EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/05/14 10:00 a.m.•14 views

CVE-2023-2694 SourceCodester Online Exam System POST Parameter data sql injection

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been classified as critical. This affects an unknown part of the file /dosen/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to initiate th...

6.5CVSS7.4AI score0.0082EPSS
SaveExploits1References3
CVE
CVE
•added 2023/05/14 10:00 a.m.•71 views

CVE-2023-2694

CVE-2023-2694 affects SourceCodester Online Exam System 1.0, specifically the POST Parameter Handler file /dosen/data. The vulnerability arises from improper handling of the columns[1][data] parameter, enabling SQL injection and remote exploitation. Public disclosures exist, and multiple trusted ...

9.8CVSS7.4AI score0.0082EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder