Lucene search
+L

53 matches found

Cvelist
Cvelist
•added 2024/10/24 4:31 p.m.•32 views

CVE-2024-10336 SourceCodeHero Clothes Recommendation System Admin Login Page index.php sql injection

A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/index.php of the component Admin Login Page. The manipulation of the argument t1 leads to sql injection. The attack may be...

7.5CVSS0.00633EPSS
SaveExploits0References3
CVE
CVE
•added 2024/10/24 4:31 p.m.•62 views

CVE-2024-10336

CVE-2024-10336 affects SourceCodeHero Clothes Recommendation System 1.0. The vulnerability is a SQL injection in the Admin Login Page, specifically via the t1 parameter in the file /admin/index.php. Root cause: improper handling of user input leading to injection of SQL statements. Impact, as sta...

9.8CVSS7.7AI score0.00633EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/24 4:31 p.m.•16 views

CVE-2024-10336 SourceCodeHero Clothes Recommendation System Admin Login Page index.php sql injection

A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/index.php of the component Admin Login Page. The manipulation of the argument t1 leads to sql injection. The attack may be...

7.5CVSS9.8AI score0.00633EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/10/24 12:00 a.m.•11 views

SourceCodeHero Clothes Recommendation System SQL注入漏洞

SourceCodeHero Clothes Recommendation System is a SourceCodeHero open source clothing recommendation system. A SQL injection vulnerability exists in SourceCodeHero Clothes Recommendation System version 1.0, which stems from the parameter view/view1 in the file /admin/home.php that can lead to SQL...

7.2CVSS5.8AI score0.00454EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/24 12:00 a.m.•6 views

CVE-2024-10337: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodeHero Clothes Recommendation System 1.0. Affected is an unknown function of the file /admin/home.php?con=add. The manipulation of the argument cat/subcat/ t1/t2/text leads to sql injection. It is possible to launch the attack...

7.2CVSS5.3AI score0.00454EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/24 12:00 a.m.•14 views

SourceCodeHero Clothes Recommendation System SQL注入漏洞

SourceCodeHero Clothes Recommendation System is a SourceCodeHero open source clothing recommendation system. SourceCodeHero Clothes Recommendation System version 1.0 suffers from a SQL injection vulnerability, which originates from the parameter t1 in the file /admin/index.php of the component...

9.8CVSS7.8AI score0.00633EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/10/24 12:00 a.m.•17 views

SourceCodeHero Clothes Recommendation System 安全漏洞

SourceCodeHero Clothes Recommendation System is an open source clothing recommendation system from SourceCodeHero. A security vulnerability exists in SourceCodeHero Clothes Recommendation System version 1.0, which originates from the parameter cat/subcat/t1/t2/text in the file...

7.2CVSS5.5AI score0.00454EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/10/24 12:00 a.m.•4 views

PT-2024-16198

Name of the Vulnerable Software and Affected Versions SourceCodeHero Clothes Recommendation System version 1.0 Description A critical issue was found in the system, affecting an unknown functionality of the file /admin/home.php. The manipulation of the view argument, specifically view1, leads to...

7.2CVSS0.00454EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2024/10/24 12:00 a.m.•5 views

PT-2024-16196

Name of the Vulnerable Software and Affected Versions SourceCodeHero Clothes Recommendation System version 1.0 Description A critical issue affects the Admin Login Page component, specifically the /admin/index.php file, where the manipulation of the t1 argument leads to SQL injection. This issue...

9.8CVSS0.00633EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/24 12:00 a.m.•8 views

CVE-2024-10338: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/home.php. The manipulation of the argument view/view1 leads to sql injection. The attack can be launched remotely. Th...

7.2CVSS5.3AI score0.00454EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/24 12:00 a.m.•3 views

CVE-2024-10336: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/index.php of the component Admin Login Page. The manipulation of the argument t1 leads to sql injection. The attack may be...

9.8CVSS6.9AI score0.00633EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/05 5:15 p.m.•15 views

CVE-2024-44728

Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact in /clientdetails/admin/regester.php...

6.1CVSS5.8AI score0.00357EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/05 5:15 p.m.•27 views

CVE-2024-44727

Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...

9.8CVSS0.00532EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/05 5:15 p.m.•57 views

CVE-2024-44728

Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact in /clientdetails/admin/regester.php...

7.6CVSS0.00357EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/09/05 12:00 a.m.•18 views

Sourcecodehero Event Management System 安全漏洞

Sourcecodehero Event Management System is an open source event management system from Sourcecodehero. A security vulnerability exists in the Sourcecodehero Event Management System version 1.0, which stems from a vulnerability that allows storage via the Full Name, Address, Email, and contact...

7.6CVSS6.5AI score0.00357EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/09/05 12:00 a.m.•48 views

CVE-2024-44728

Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact in /clientdetails/admin/regester.php...

0.00357EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/09/05 12:00 a.m.•40 views

CVE-2024-44727

Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...

0.00532EPSS
SaveExploits1References1
CVE
CVE
•added 2024/09/05 12:00 a.m.•78 views

CVE-2024-44727

Sourcecodehero Event Management System 1.0 is vulnerable to an SQL Injection via the username parameter in /event/admin/login.php. Documented across multiple feeds; no patch/version fix details are provided in the supplied materials. Exploitation details, impact, and mitigations beyond the generi...

9.8CVSS5.8AI score0.00532EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/05 12:00 a.m.•13 views

CVE-2024-44727

Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...

8AI score0.00532EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/09/05 12:00 a.m.•17 views

PT-2024-31224 · Unknown · Sourcecodehero Event Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodehero Event Management System version 1.0 Description: The issue is related to a SQL Injection vulnerability via the parameter username in the "/event/admin/login.php" endpoint. This allows attackers to remotely compromise databases...

9.8CVSS8.1AI score0.00532EPSS
SaveExploits1References9
Rows per page
Query Builder