Lucene search
+L

1239 matches found

BDU FSTEC
BDU FSTEC
•added 2023/03/06 12:00 a.m.•18 views

The vulnerability of the signup.php script in the Dental Clinic Appointment Reservation System allows attackers to perform cross-site scripting attacks.

The vulnerability in the signup.php script of the Dental Clinic Appointment Reservation System relates to insufficient protection of the website’s structure when processing the firstname parameter. Exploiting this vulnerability allows an attacker to perform cross-site scripting attacks remotely...

5CVSS5.2AI score0.00784EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/02/26 12:15 p.m.•11 views

CVE-2023-1036

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /APR/signup.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross...

6.1CVSS3.9AI score0.00784EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/02/26 12:00 a.m.•13 views

PT-2023-1563 · Sourcecodester · Dental Clinic Appointment Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Dental Clinic Appointment Reservation System version 1.0 Description: A vulnerability was found in the Dental Clinic Appointment Reservation System, affecting the file /APR/signup.php, specifically the POST Parameter Handler...

6.1CVSS4.6AI score0.00784EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2023/02/08 12:00 a.m.•14 views

Signup Form Detected

This is an informational notice that the scanner identified a potential signup form. No source data...

7.3AI score
SaveExploits0
NVD
NVD
•added 2023/02/06 3:15 p.m.•30 views

CVE-2023-24191

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...

6.1CVSS6AI score0.00486EPSS
SaveExploits1References2
OSV
OSV
•added 2023/02/06 3:15 p.m.•14 views

CVE-2023-24191

Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in signup.php...

6.1CVSS6.3AI score0.00486EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/02/06 12:00 a.m.•14 views

Online Food Ordering System 跨站脚本漏洞

A cross-site scripting vulnerability exists in Online Food Ordering System, an online food ordering system. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the redirect parameter of the signup.php page, which can be exploited by attackers to caus...

6.1CVSS6.2AI score0.00486EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/02/06 12:00 a.m.•18 views

PT-2023-19467 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version v2 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is present in the redirect parameter in the signup.php file. Recommendations: For Online Food Ordering...

6.1CVSS5.8AI score0.00486EPSS
SaveExploits1References5
The Hacker News
The Hacker News
•added 2023/02/03 7:55 a.m.•6 views

Atlassian's Jira Service Management Found Vulnerable to Critical Vulnerability

Atlassian has released fixes to resolve a critical security flaw in Jira Service Management Server and Data Center that could be abused by an attacker to pass off as another user and gain unauthorized access to susceptible instances. The vulnerability is tracked as CVE-2023-22501 CVSS score: 9.4...

9.8CVSS9.8AI score0.98076EPSS
SaveExploits3
NCSC
NCSC
•added 2023/02/02 12:00 a.m.•11 views

Vulnerability fixed in Atlassian Jira

Atlassian has fixed a vulnerability in Jira Service Management Server and Data Center. The vulnerability allows a malicious party able to obtain a user's signup token and thus obtain a user's signup token and thereby bypass authentication. To obtain a signup token, a malicious party must gain...

9.4CVSS6.9AI score0.15533EPSS
SaveExploits0
OSV
OSV
•added 2023/02/01 7:15 p.m.•13 views

CVE-2023-22501

An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacker to impersonate another user and gain access to a Jira Service Management instance under certain circumstances. With write access to a User Directory and outgoing email enabled...

9.1CVSS7.5AI score0.15533EPSS
SaveExploits0References1
NVD
NVD
•added 2023/02/01 7:15 p.m.•43 views

CVE-2023-22501

An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacker to impersonate another user and gain access to a Jira Service Management instance under certain circumstances. With write access to a User Directory and outgoing email enabled...

9.4CVSS9.5AI score0.15533EPSS
SaveExploits0References1
Prion
Prion
•added 2023/02/01 7:15 p.m.•41 views

Authentication flaw

An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacker to impersonate another user and gain access to a Jira Service Management instance under certain circumstances. With write access to a User Directory and outgoing email enabled...

7.5CVSS9.4AI score0.15533EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/02/01 6:00 p.m.•75 views

CVE-2023-22501

An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacker to impersonate another user and gain access to a Jira Service Management instance under certain circumstances. With write access to a User Directory and outgoing email enabled...

9.4CVSS9.6AI score0.15533EPSS
SaveExploits0References1
CVE
CVE
•added 2023/02/01 6:00 p.m.•164 views

CVE-2023-22501

CVE-2023-22501 affects Jira Service Management Server and Data Center. It is an authentication vulnerability allowing impersonation to access signup tokens for users with never-logged-in accounts, if an attacker has write access to a User Directory and outgoing email enabled, and can access token...

9.4CVSS9.6AI score0.15533EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/01 12:00 a.m.•0 views

CVE-2023-22501: Improper Authentication

An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacker to impersonate another user and gain access to a Jira Service Management instance under certain circumstances. With write access to a User Directory and outgoing email enabled...

9.4CVSS8.1AI score0.15533EPSS
SaveExploits0References3
NVD
NVD
•added 2023/01/15 12:15 p.m.•19 views

CVE-2023-0304

A vulnerability classified as critical has been found in SourceCodester Online Food Ordering System. This affects an unknown part of the file adminclass.php of the component Signup Module. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotel...

7.5CVSS6.9AI score0.00597EPSS
SaveExploits1References3
Prion
Prion
•added 2023/01/15 12:15 p.m.•26 views

Sql injection

A vulnerability classified as critical has been found in SourceCodester Online Food Ordering System. This affects an unknown part of the file adminclass.php of the component Signup Module. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotel...

6.5CVSS7.9AI score0.00597EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/01/15 11:58 a.m.•29 views

CVE-2023-0304 SourceCodester Online Food Ordering System Signup Module admin_class.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Food Ordering System. This affects an unknown part of the file adminclass.php of the component Signup Module. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotel...

6.5CVSS8.1AI score0.00597EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/01/15 12:00 a.m.•11 views

PT-2023-16159 · Unknown · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System affected versions not specified Description: A critical vulnerability has been found in the SourceCodester Online Food Ordering System, affecting the Signup Module in the file admin class.php. The...

7.5CVSS7.6AI score0.00597EPSS
SaveExploits1References6
Rows per page
Query Builder