Lucene search
+L

240 matches found

Positive Technologies
Positive Technologies
•added 2024/11/14 12:00 a.m.•6 views

PT-2024-16830

Name of the Vulnerable Software and Affected Versions SourceCodester Best Employee Management System version 1.0 SourceCodester 442035.0 Description A critical issue has been found in the software, affecting some unknown functionality of the file /admin/fetch product details.php. The manipulation...

8.8CVSS5.5AI score0.00679EPSS
SaveExploits1References14
Positive Technologies
Positive Technologies
•added 2024/11/14 12:00 a.m.•7 views

PT-2024-16832

Name of the Vulnerable Software and Affected Versions SourceCodester Best Employee Management System version 1.0 Description A critical issue has been found in the SourceCodester Best Employee Management System, affecting the file /admin/profile.php. The manipulation of the website image argument...

7.2CVSS5.4AI score0.00662EPSS
SaveExploits1References18
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/14 12:00 a.m.•5 views

CVE-2024-11213: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Best Employee Management System 1.0. This affects an unknown part of the file /admin/editrole.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit...

7.2CVSS5.3AI score0.00539EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/14 12:00 a.m.•4 views

PT-2024-16831

Name of the Vulnerable Software and Affected Versions SourceCodester Best Employee Management System version 1.0 Description A critical issue was found in the system, affecting an unknown part of the file /admin/edit role.php. The manipulation of the id argument leads to SQL injection. It is...

7.2CVSS5.5AI score0.00539EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/14 12:00 a.m.•8 views

CVE-2024-11214: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in SourceCodester Best Employee Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/profile.php. The manipulation of the argument websiteimage leads to unrestricted upload. The attack can be initiated remotely...

7.2CVSS5.2AI score0.00662EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/25 12:00 a.m.•12 views

SourceCodester Best House Rental Management System 安全漏洞

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester, Inc. A security vulnerability exists in SourceCodester Best House Rental Management System version v.1.0. A remote attacker can exploit this vulnerability to execute arbitrary code via the...

9.8CVSS7.8AI score0.00889EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/24 12:00 a.m.•6 views

CVE-2024-10349: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. Affected by this issue is the function deletetenant of the file /ajax.php?action=deletetenant. The manipulation of the argument id leads to sql injection. The attack may be launched...

9.8CVSS6.4AI score0.00573EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/24 12:00 a.m.•8 views

CVE-2024-10348: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php?page=tenants of the component Manage Tenant Details. The manipulation of the argument Last Name/First Name/Middle Name...

5.4CVSS3.7AI score0.00463EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/20 5:15 p.m.•30 views

CVE-2024-9041

A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=updateaccount. The manipulation of the argument firstname/lastname/email leads to sql injection. The attack can...

8.8CVSS0.00614EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/20 12:00 a.m.•6 views

CVE-2024-9039: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=signup. The manipulation of the argument firstname/lastname/email leads to sql injection...

9.8CVSS7AI score0.00698EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/09/20 12:00 a.m.•6 views

PT-2024-39377

Name of the Vulnerable Software and Affected Versions: SourceCodester Best House Rental Management System version 1.0 Description: A vulnerability has been found in the system, classified as problematic, affecting an unknown functionality of the file /ajax.php?action=save category. The manipulati...

5.4CVSS0.00462EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2024/09/20 12:00 a.m.•7 views

PT-2024-39383

Name of the Vulnerable Software and Affected Versions SourceCodester Best House Rental Management System version 1.0 Description A critical vulnerability has been found in the system, affecting some unknown functionality of the file "/ajax.php?action=signup". The manipulation of the arguments...

9.8CVSS0.00698EPSS
SaveExploits1References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/20 12:00 a.m.•5 views

CVE-2024-9041: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=updateaccount. The manipulation of the argument firstname/lastname/email leads to sql injection. The attack can...

8.8CVSS6.4AI score0.00614EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/20 12:00 a.m.•5 views

CVE-2024-9033: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=savecategory. The manipulation of the argument name leads to cross site scripting. The...

5.4CVSS3.6AI score0.00462EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/19 11:15 p.m.•40 views

CVE-2024-9008

A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-details.php of the component Comment Section. The manipulation of the argument name leads to sql injection. The attack can be initiated remotel...

9.8CVSS0.00644EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/19 12:00 a.m.•8 views

CVE-2024-9008: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-details.php of the component Comment Section. The manipulation of the argument name leads to sql injection. The attack can be initiated remotel...

9.8CVSS6.4AI score0.00644EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/09/18 12:00 a.m.•12 views

Sourcecodester Best House Rental Management System 安全漏洞

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester, Inc. A security vulnerability exists in Sourcecodester Best House Rental Management System version 1.0, which originates from an arbitrary file upload vulnerability in the savesettings...

9.8CVSS7AI score0.01213EPSS
SaveExploits1References2
CVE
CVE
•added 2024/09/12 2:00 a.m.•71 views

CVE-2024-8708

CVE-2024-8708 affects SourceCodester Best House Rental Management System 1.0. The flaw is in categories.php processing that enables cross-site scripting and can be triggered remotely. PT-2024-39188 confirms the affected version and recommends patching the 1.0 release, validating inputs, and restr...

6.1CVSS4.1AI score0.00319EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/12 12:00 a.m.•5 views

CVE-2024-8709: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is the function deleteuser/saveuser of the file /adminclass.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

8.8CVSS6.4AI score0.00601EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/12 12:00 a.m.•5 views

CVE-2024-8708: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file categories.php. The manipulation leads to cross site scripting. The attack may be initiated remotely...

6.1CVSS3.6AI score0.00319EPSS
SaveExploits0References1
Rows per page
Query Builder