28 matches found
EUVD-2024-54420
Malicious code in bioql PyPI...
EUVD-2024-54423
Malicious code in bioql PyPI...
CVE-2024-40070
Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2024-40068
Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=templates/managetemplate=1...
CVE-2024-40071
Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2024-40073
Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at idgenerator/admin/?page=generate&template=4...
CVE-2024-40070
Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2024-40069
The Sourcecodester Online ID Generator System version 1.0 contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the improper neutralization of input via the POST parameters firstname and lastname at the id_generator/classes/Users.php?f=save endpoint. Attackers can exploit ...
CVE-2024-40074
The Sourcecodester Online ID Generator System 1.0 is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists in the id_generator/classes/SystemSettings.php?f=update_settings endpoint, specifically due to improper neutralization of the short_name POST parameter. An attacker could potenti...
CVE-2024-40070
Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2024-40070
Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2024-40071
Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
PT-2025-16795
Name of the Vulnerable Software and Affected Versions Sourcecodester Online ID Generator System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the template parameter at the "/id generator/admin/?page=generate&template=4"...
CVE-2024-40073: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at idgenerator/admin/?page=generate&template=4...
CVE-2024-40072
Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index&id=1...
CVE-2024-40071
Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
PT-2025-16786
Name of the Vulnerable Software and Affected Versions Sourcecodester Online ID Generator System version 1.0 Description The issue is related to Stored Cross Site Scripting XSS via the endpoint "id generator/classes/Users.php?f=save". The vulnerability is specifically in the POST parameters...
CVE-2024-40070
Sourcecodester Online ID Generator System 1.0 contains an arbitrary file upload vulnerability within the id_generator/classes/Users.php?f=save endpoint. An attacker can exploit this flaw by uploading a crafted PHP file to achieve arbitrary code execution . To mitigate this risk, it is recommended...
CVE-2024-40071: Unrestricted Upload of File with Dangerous Type
Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2024-40070: Improper Neutralization of Special Elements used in a Command
Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...