Lucene search
+L

53 matches found

CVE
CVE
•added 2022/12/11 12:00 a.m.•67 views

CVE-2022-4401

CVE-2022-4401 affects pallidlight online-course-selection-system. The issue is a cross-site scripting flaw in an unknown function, enabling remote exploitation over a network. Root cause described as manipulation leading to XSS; impact is limited to confidentiality/integrity (per sources), with n...

5.4CVSS4.3AI score0.0038EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/12/11 12:00 a.m.•45 views

CVE-2022-4401 pallidlight online-course-selection-system cross site scripting

A vulnerability was found in pallidlight online-course-selection-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-215268...

3.5CVSS5.5AI score0.0038EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/11 12:00 a.m.•4 views

CVE-2022-4401: Improper Neutralization

A vulnerability was found in pallidlight online-course-selection-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-215268...

5.4CVSS4.1AI score0.0038EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2022/12/11 12:00 a.m.•16 views

CVE-2022-4401 pallidlight online-course-selection-system cross site scripting

A vulnerability was found in pallidlight online-course-selection-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-215268...

3.5CVSS6.5AI score0.0038EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/04/08 3:50 a.m.•37 views

CVE-2021-28174 Mitake Smart Stock Selection System - Broken Authentication

Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login...

6.5CVSS6.9AI score0.00953EPSS
SaveExploits0References1
CVE
CVE
•added 2021/04/08 3:50 a.m.•83 views

CVE-2021-28174

Mitake smart stock selection system is affected by CVE-2021-28174, a broken authentication vulnerability where URL parameter manipulation lets remote attackers obtain privileged access to transaction records and perform fraudulent trading without login. The available documents describe the vulner...

6.5CVSS6.6AI score0.00953EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/08 12:00 a.m.•10 views

CVE-2021-28174: Improper Authentication

Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login...

6.5CVSS5.9AI score0.00953EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/04/08 12:00 a.m.•18 views

Mitake Smart Stock Selection System Authorization Issues Vulnerability

Mitake Information Mitake smart stock selection system is an application system of China-based Mitake Information Corporation. A security vulnerability exists in the Mitake smart stock selection system, which can be exploited by an attacker to gain privileged access to transaction records and...

6.5CVSS6.5AI score0.00953EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/04/08 12:00 a.m.•5 views

PT-2021-17790

Name of the Vulnerable Software and Affected Versions: Mitake smart stock selection system affected versions not specified Description: The issue allows remote attackers to gain privileged permissions by manipulating parameters in the URL, enabling access to transaction records and fraudulent...

6.5CVSS0.00953EPSS
SaveExploits0References5
CNVD
CNVD
•added 2021/01/22 12:00 a.m.•13 views

Arbitrary File Deletion Vulnerability in Zhirui School Course Selection System

Zhirui school course selection system positioning school education development system, specialized for secondary schools, colleges and universities students online course selection, results query system, for the integrated campus information system. Zhirui School Selection System has an arbitrary...

7AI score
SaveExploits0
CNVD
CNVD
•added 2020/06/02 12:00 a.m.•13 views

SQL Injection Vulnerability in University Worry-Free Online Course Selection System

School Worry-Free Online Course Selection System is designed to solve the problem of cumbersome work brought about by students' independent course selection by selecting courses online and completing personal course selection information, replacing the manual operation with paper. The system is...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2019/03/23 12:00 a.m.•8 views

SQL Injection Vulnerability in Zhirui School Course Selection System

Zhirui school course selection system positioning school education development system, specialized for secondary schools, colleges and universities students online course selection, results query system, for the integrated campus information system. Zhirui School Selection System suffers from SQL...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2019/03/22 12:00 a.m.•7 views

SQL Injection Vulnerability in Zhirui School Course Selection System

Zhirui school course selection system positioning school education development system, specialized for secondary schools, colleges and universities students online course selection, results query system, for the integrated campus information system. Zhirui School Selection System suffers from SQL...

7.7AI score
SaveExploits0
Rows per page
Query Builder