Lucene search
+L

313 matches found

OSV
OSV
•added 2023/05/14 9:15 a.m.•13 views

CVE-2023-2691

A vulnerability, which was classified as problematic, was found in SourceCodester Personnel Property Equipment System 1.0. Affected is an unknown function of the file admin/additem.php of the component POST Parameter Handler. The manipulation of the argument itemname leads to cross site scripting...

5.4CVSS4AI score0.00636EPSS
SaveExploits1References3
Prion
Prion
•added 2023/05/14 9:15 a.m.•24 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Personnel Property Equipment System 1.0. Affected is an unknown function of the file admin/additem.php of the component POST Parameter Handler. The manipulation of the argument itemname leads to cross site scripting...

4CVSS5.3AI score0.00636EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/05/14 8:31 a.m.•30 views

CVE-2023-2691 SourceCodester Personnel Property Equipment System POST Parameter add_item.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Personnel Property Equipment System 1.0. Affected is an unknown function of the file admin/additem.php of the component POST Parameter Handler. The manipulation of the argument itemname leads to cross site scripting...

4CVSS5.5AI score0.00636EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/05/14 12:00 a.m.•15 views

PT-2023-20878 · Unknown · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam System version 1.0 Description: A critical issue affects the processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The...

9.8CVSS6.9AI score0.0082EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/14 12:00 a.m.•3 views

CVE-2023-2696: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack may be...

9.8CVSS5.5AI score0.0082EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/14 12:00 a.m.•3 views

CVE-2023-2691: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Personnel Property Equipment System 1.0. Affected is an unknown function of the file admin/additem.php of the component POST Parameter Handler. The manipulation of the argument itemname leads to cross site scripting...

5.4CVSS4AI score0.00636EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/05/14 12:00 a.m.•16 views

PT-2023-20853 · Unknown · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam System version 1.0 Description: A critical issue was found in the SourceCodester Online Exam System, affecting some unknown functionality of the file /mahasiswa/data of the component POST Parameter Handler. The...

9.8CVSS6.8AI score0.0082EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/14 12:00 a.m.•1 views

CVE-2023-2694: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been classified as critical. This affects an unknown part of the file /dosen/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to initiate th...

9.8CVSS5.5AI score0.0082EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/14 12:00 a.m.•1 views

CVE-2023-2695: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /kelas/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack can be...

9.8CVSS5.5AI score0.0082EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/05/14 12:00 a.m.•17 views

PT-2023-20867 · Unknown · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam System version 1.0 Description: A critical issue has been found in the SourceCodester Online Exam System, affecting the POST Parameter Handler component in the /kelas/data file. The manipulation of the columns1data...

9.8CVSS7AI score0.0082EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/05/14 12:00 a.m.•12 views

SourceCodester Personnel Property Equipment System 跨站脚本漏洞

Personnel Property Equipment System is a personnel property equipment management system by Jon Remus Sevellejo personal developer. A cross-site scripting vulnerability exists in Personnel Property Equipment System v1.0, which stems from the lack of effective filtering and escaping of user-supplie...

5.4CVSS6AI score0.00636EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2023/05/14 12:00 a.m.•18 views

PT-2023-20861 · Unknown · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam System version 1.0 Description: A critical issue has been found in the SourceCodester Online Exam System, affecting the component POST Parameter Handler, specifically the file /dosen/data. The manipulation of the...

9.8CVSS7.2AI score0.0082EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/14 12:00 a.m.•6 views

CVE-2023-2697: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /jurusan/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to launch the...

9.8CVSS5.5AI score0.0082EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/14 12:00 a.m.•4 views

CVE-2023-2693: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Exam System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /mahasiswa/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack...

9.8CVSS5.5AI score0.0082EPSS
SaveExploits1References2
Prion
Prion
•added 2023/05/12 10:15 a.m.•24 views

Cross site scripting

A vulnerability has been found in SourceCodester File Tracker Manager System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /filemanager/admin/saveuser.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross si...

4CVSS5.3AI score0.00592EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/05/12 9:31 a.m.•50 views

CVE-2023-2678 SourceCodester File Tracker Manager System POST Parameter save_user.php cross site scripting

A vulnerability has been found in SourceCodester File Tracker Manager System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /filemanager/admin/saveuser.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross si...

4CVSS5.6AI score0.00592EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/12 12:00 a.m.•4 views

CVE-2023-2678: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester File Tracker Manager System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /filemanager/admin/saveuser.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross si...

5.4CVSS3.8AI score0.00592EPSS
SaveExploits1References2
Prion
Prion
•added 2023/05/11 7:15 a.m.•26 views

Sql injection

A vulnerability classified as critical was found in SourceCodester File Tracker Manager System 1.0. This vulnerability affects unknown code of the file register/updatepassword.php of the component POST Parameter Handler. The manipulation of the argument newpassword leads to sql injection. The...

6.5CVSS9.8AI score0.00726EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/05/11 5:31 a.m.•49 views

CVE-2023-2641 SourceCodester Online Internship Management System POST Parameter login.php sql injection

A vulnerability was found in SourceCodester Online Internship Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin/login.php of the component POST Parameter Handler. The manipulation of the argument email leads to sql...

7.5CVSS9.9AI score0.008EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/11 12:00 a.m.•2 views

CVE-2023-2643: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester File Tracker Manager System 1.0. This vulnerability affects unknown code of the file register/updatepassword.php of the component POST Parameter Handler. The manipulation of the argument newpassword leads to sql injection. The...

9.8CVSS5.5AI score0.00726EPSS
SaveExploits1References2
Rows per page
Query Builder