Lucene search
+L

128 matches found

OSV
OSV
•added 2023/09/29 8:15 p.m.•13 views

CVE-2023-5283

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file teachersignup.php. The manipulation of the argument firstname/lastname leads to sql injection. The attack may be initiated remotely. The...

8.8CVSS5.7AI score0.00781EPSS
SaveExploits1References3
NVD
NVD
•added 2023/09/29 8:15 p.m.•24 views

CVE-2023-5284

A vulnerability classified as critical has been found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file uploadsavestudent.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to launch the attack remotely. The...

8.8CVSS7.2AI score0.01008EPSS
SaveExploits1References3
CVE
CVE
•added 2023/09/29 7:31 p.m.•148 views

CVE-2023-5284

SourceCodester Engineers Online Portal 1.0 contains a vulnerability in the upload_save_student.php function where manipulating the uploaded_file parameter enables unrestricted file upload. This remote exploitation can lead to arbitrary code execution as indicated by multiple sources; the vulnerab...

8.8CVSS7.1AI score0.01008EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/09/29 7:31 p.m.•36 views

CVE-2023-5284 SourceCodester Engineers Online Portal upload_save_student.php unrestricted upload

A vulnerability classified as critical has been found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file uploadsavestudent.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to launch the attack remotely. The...

6.5CVSS9AI score0.01008EPSS
SaveExploits1References3
NVD
NVD
•added 2023/09/29 7:15 p.m.•30 views

CVE-2023-5282

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file seedmessagestudent.php. The manipulation of the argument teacherid leads to sql injection. The attack can be initiated remotely. The explo...

9.8CVSS7.4AI score0.0082EPSS
SaveExploits1References3
Prion
Prion
•added 2023/09/29 7:15 p.m.•31 views

Sql injection

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file seedmessagestudent.php. The manipulation of the argument teacherid leads to sql injection. The attack can be initiated remotely. The explo...

6.5CVSS9.7AI score0.0082EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2023/09/29 7:15 p.m.•35 views

Sql injection

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as critical. This affects an unknown part of the file removeinboxmessage.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

6.5CVSS9.7AI score0.0082EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/09/29 7:00 p.m.•43 views

CVE-2023-5282 SourceCodester Engineers Online Portal seed_message_student.php sql injection

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file seedmessagestudent.php. The manipulation of the argument teacherid leads to sql injection. The attack can be initiated remotely. The explo...

6.5CVSS10AI score0.0082EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/09/29 6:31 p.m.•18 views

CVE-2023-5281 SourceCodester Engineers Online Portal remove_inbox_message.php sql injection

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as critical. This affects an unknown part of the file removeinboxmessage.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

6.5CVSS7.2AI score0.0082EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/09/29 6:31 p.m.•40 views

CVE-2023-5281 SourceCodester Engineers Online Portal remove_inbox_message.php sql injection

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as critical. This affects an unknown part of the file removeinboxmessage.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

6.5CVSS9.9AI score0.0082EPSS
SaveExploits1References3
NVD
NVD
•added 2023/09/29 6:15 p.m.•28 views

CVE-2023-5279

A vulnerability has been found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file myclassmates.php. The manipulation of the argument teacherclassstudentid leads to sql injection. The attack can be launch...

9.8CVSS7.4AI score0.0082EPSS
SaveExploits1References3
NVD
NVD
•added 2023/09/29 6:15 p.m.•29 views

CVE-2023-5278

A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...

9.8CVSS7.4AI score0.00827EPSS
SaveExploits1References3
OSV
OSV
•added 2023/09/29 6:15 p.m.•14 views

CVE-2023-5278

A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...

9.8CVSS5.7AI score0.00827EPSS
SaveExploits1References3
NVD
NVD
•added 2023/09/29 6:15 p.m.•27 views

CVE-2023-5277

A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...

9.8CVSS7.2AI score0.00986EPSS
SaveExploits1References3
OSV
OSV
•added 2023/09/29 6:15 p.m.•13 views

CVE-2023-5277

A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...

9.8CVSS5.4AI score0.00986EPSS
SaveExploits1References3
Prion
Prion
•added 2023/09/29 6:15 p.m.•32 views

Sql injection

A vulnerability has been found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file myclassmates.php. The manipulation of the argument teacherclassstudentid leads to sql injection. The attack can be launch...

6.5CVSS9.7AI score0.0082EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2023/09/29 6:15 p.m.•25 views

Out-of-bounds

A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file studentavatar.php. The manipulation of the argument change leads to unrestricted upload. The attack may be initiated remotely. Th...

6.5CVSS9.5AI score0.00986EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2023/09/29 6:15 p.m.•31 views

Sql injection

A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file mystudents.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee...

6.5CVSS9.6AI score0.0082EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2023/09/29 6:15 p.m.•28 views

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit h...

6.5CVSS9.7AI score0.00827EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/29 6:00 p.m.•24 views

CVE-2023-5280 SourceCodester Engineers Online Portal my_students.php sql injection

A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file mystudents.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee...

6.5CVSS7.4AI score0.0082EPSS
SaveExploits1References3
Rows per page
Query Builder