Lucene search
+L

2226 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•3 views

CVE-2024-0463: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /production/adminviewinfo.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to sql...

9.8CVSS6.6AI score0.005EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•2 views

CVE-2024-0464: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Online Faculty Clearance 1.0. This affects an unknown part of the file deletefaculty.php of the component HTTP GET Request Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the...

9.8CVSS6.5AI score0.00636EPSS
SaveExploits0References2
CNVD
CNVD
•added 2024/01/12 12:00 a.m.•21 views

Totolink T6 Buffer Overflow Vulnerability

TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in Totolink T6 version 4.1.9cu.5241B20210923, which originates from the component HTTP POST Request Handler in the file /cgi-bin/cstecgi.cgi that fails to correctly validate t...

10CVSS8.2AI score0.01518EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•4 views

CVE-2024-0461: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been classified as critical. Affected is an unknown function of the file deactivate.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to sql injection. It is possible to laun...

9.8CVSS6.5AI score0.005EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•4 views

CVE-2024-0462: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /production/designeeviewstatus.php of the component HTTP POST Request Handler. The manipulation of the argument haydi...

9.8CVSS6.6AI score0.00537EPSS
SaveExploits0References2
Prion
Prion
•added 2024/01/11 7:15 p.m.•36 views

Design/Logic Flaw

A vulnerability was found in Jasper httpdx up to 1.5.4 and classified as problematic. This issue affects some unknown processing of the component HTTP POST Request Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the...

5CVSS7.1AI score0.01142EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2024/01/11 6:15 p.m.•37 views

CVE-2024-0418

A vulnerability has been found in iSharer and upRedSun File Sharing Wizard up to 1.5.0 and classified as problematic. This vulnerability affects unknown code of the component GET Request Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has be...

7.5CVSS6.2AI score0.0132EPSS
SaveExploits1References4
OSV
OSV
•added 2024/01/11 6:15 p.m.•15 views

CVE-2024-0418

A vulnerability has been found in iSharer and upRedSun File Sharing Wizard up to 1.5.0 and classified as problematic. This vulnerability affects unknown code of the component GET Request Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has be...

7.5CVSS4.7AI score0.0132EPSS
SaveExploits1References4
Prion
Prion
•added 2024/01/11 6:15 p.m.•29 views

Design/Logic Flaw

A vulnerability has been found in iSharer and upRedSun File Sharing Wizard up to 1.5.0 and classified as problematic. This vulnerability affects unknown code of the component GET Request Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has be...

5CVSS7.3AI score0.0132EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2024/01/11 6:00 p.m.•71 views

CVE-2024-0418

CVE-2024-0418 affects iSharer and upRedSun File Sharing Wizard up to v1.5.0, with the vulnerable element identified as the GET Request Handler. The available descriptions state that remote manipulation can cause a denial of service and that the exploit has been disclosed publicly. The records do ...

7.5CVSS7.6AI score0.0132EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/11 6:00 p.m.•8 views

CVE-2024-0418 iSharer and upRedSun File Sharing Wizard GET Request denial of service

A vulnerability has been found in iSharer and upRedSun File Sharing Wizard up to 1.5.0 and classified as problematic. This vulnerability affects unknown code of the component GET Request Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has be...

5.3CVSS7.3AI score0.0132EPSS
SaveExploits1References4
NVD
NVD
•added 2024/01/11 5:15 p.m.•30 views

CVE-2024-0411

A vulnerability was found in DeShang DSMall up to 6.1.0. It has been classified as problematic. This affects an unknown part of the file public/install.php of the component HTTP GET Request Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely...

7.5CVSS6.2AI score0.02211EPSS
SaveExploits0References3
NVD
NVD
•added 2024/01/11 5:15 p.m.•39 views

CVE-2024-0412

A vulnerability was found in DeShang DSShop up to 3.1.0. It has been declared as problematic. This vulnerability affects unknown code of the file public/install.php of the component HTTP GET Request Handler. The manipulation leads to improper access controls. The attack can be initiated remotely...

9.8CVSS6.7AI score0.00809EPSS
SaveExploits0References3
OSV
OSV
•added 2024/01/11 5:15 p.m.•14 views

CVE-2024-0411

A vulnerability was found in DeShang DSMall up to 6.1.0. It has been classified as problematic. This affects an unknown part of the file public/install.php of the component HTTP GET Request Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely...

7.5CVSS4.8AI score0.02211EPSS
SaveExploits0References3
Prion
Prion
•added 2024/01/11 5:15 p.m.•32 views

Improper access control

A vulnerability was found in DeShang DSMall up to 6.1.0. It has been classified as problematic. This affects an unknown part of the file public/install.php of the component HTTP GET Request Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely...

5CVSS7.2AI score0.02211EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2024/01/11 5:15 p.m.•29 views

Improper access control

A vulnerability was found in DeShang DSShop up to 3.1.0. It has been declared as problematic. This vulnerability affects unknown code of the file public/install.php of the component HTTP GET Request Handler. The manipulation leads to improper access controls. The attack can be initiated remotely...

5CVSS7.4AI score0.00809EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2024/01/11 4:31 p.m.•80 views

CVE-2024-0412

Affected software: DeShang DSShop up to 3.1.0. Vulnerable component/file: HTTP GET Request Handler, public/install.php. Root cause: improper access controls. Impact: allows remote initiation of exploitation; exploit has been disclosed publicly. Current exploit reliability/availability not quantif...

9.8CVSS9.5AI score0.00809EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/11 12:00 a.m.•3 views

CVE-2024-0418: Improper Resource Shutdown or Release

A vulnerability has been found in iSharer and upRedSun File Sharing Wizard up to 1.5.0 and classified as problematic. This vulnerability affects unknown code of the component GET Request Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has be...

7.5CVSS5.6AI score0.0132EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/11 12:00 a.m.•18 views

File Sharing Wizard security vulnerability

File Sharing Wizard is a file sharing and transfer software package. A security vulnerability exists in File Sharing Wizard version 1.5.0, which results in a denial of service due to unknown code in the component GET Request Handler...

7.5CVSS6.9AI score0.0132EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/01/11 12:00 a.m.•15 views

DeShang DSMall Access Control Error Vulnerability

DeShang DSMall is a multi-user mall system from DeShang, China. An Access Control Error vulnerability exists in DeShang DSMall prior to version 6.1.0, which stems from the file public/install.php of the component HTTP GET Request Handler that results in incorrect access control...

7.5CVSS6.8AI score0.02211EPSS
SaveExploits0References4
Rows per page
Query Builder