Lucene search
+L

1571 matches found

Positive Technologies
Positive Technologies
•added 2023/05/16 12:00 a.m.•15 views

PT-2023-23492 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Computer and Laptop Store version 1.0 Description: The issue allows unrestricted file upload, which can lead to remote code execution. The vulnerability path is "/classes/Users.php?f=save". Recommendations: For version...

9.8CVSS7.8AI score0.01519EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/16 12:00 a.m.•4 views

CVE-2023-31857: Unrestricted Upload of File with Dangerous Type

Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save...

9.8CVSS6.2AI score0.01519EPSS
SaveExploits1References3
Prion
Prion
•added 2023/05/14 12:15 p.m.•24 views

Sql injection

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /jurusan/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to launch the...

6.5CVSS9.7AI score0.0082EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/05/14 11:31 a.m.•43 views

CVE-2023-2697 SourceCodester Online Exam System POST Parameter data sql injection

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /jurusan/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to launch the...

6.5CVSS10AI score0.0082EPSS
SaveExploits1References3
OSV
OSV
•added 2023/05/14 11:15 a.m.•20 views

CVE-2023-2695

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /kelas/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack can be...

9.8CVSS6.5AI score0.0082EPSS
SaveExploits1References3
NVD
NVD
•added 2023/05/14 11:15 a.m.•28 views

CVE-2023-2696

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack may be...

9.8CVSS7.4AI score0.0082EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/05/14 11:00 a.m.•43 views

CVE-2023-2696 SourceCodester Online Exam System POST Parameter data sql injection

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack may be...

6.5CVSS10AI score0.0082EPSS
SaveExploits1References3
NVD
NVD
•added 2023/05/14 10:15 a.m.•43 views

CVE-2023-2694

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been classified as critical. This affects an unknown part of the file /dosen/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to initiate th...

9.8CVSS7.4AI score0.0082EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/05/14 10:00 a.m.•14 views

CVE-2023-2694 SourceCodester Online Exam System POST Parameter data sql injection

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been classified as critical. This affects an unknown part of the file /dosen/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to initiate th...

6.5CVSS7.4AI score0.0082EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/05/14 12:00 a.m.•18 views

PT-2023-20867 · Unknown · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam System version 1.0 Description: A critical issue has been found in the SourceCodester Online Exam System, affecting the POST Parameter Handler component in the /kelas/data file. The manipulation of the columns1data...

9.8CVSS7AI score0.0082EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2023/05/14 12:00 a.m.•16 views

PT-2023-20878 · Unknown · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam System version 1.0 Description: A critical issue affects the processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The...

9.8CVSS6.9AI score0.0082EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2023/05/14 12:00 a.m.•18 views

PT-2023-20853 · Unknown · Sourcecodester Online Exam System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam System version 1.0 Description: A critical issue was found in the SourceCodester Online Exam System, affecting some unknown functionality of the file /mahasiswa/data of the component POST Parameter Handler. The...

9.8CVSS6.8AI score0.0082EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/14 12:00 a.m.•3 views

CVE-2023-2695: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /kelas/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack can be...

9.8CVSS5.5AI score0.0082EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/14 12:00 a.m.•4 views

CVE-2023-2694: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been classified as critical. This affects an unknown part of the file /dosen/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to initiate th...

9.8CVSS5.5AI score0.0082EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/14 12:00 a.m.•9 views

CVE-2023-2697: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /jurusan/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to launch the...

9.8CVSS5.5AI score0.0082EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/14 12:00 a.m.•4 views

CVE-2023-2696: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack may be...

9.8CVSS5.5AI score0.0082EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/14 12:00 a.m.•9 views

CVE-2023-2693: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Exam System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /mahasiswa/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack...

9.8CVSS5.5AI score0.0082EPSS
SaveExploits1References2
NVD
NVD
•added 2023/05/11 3:15 p.m.•31 views

CVE-2023-2659

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file viewproduct.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

9.8CVSS7.4AI score0.0082EPSS
SaveExploits1References3
NVD
NVD
•added 2023/05/11 3:15 p.m.•35 views

CVE-2023-2661

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit ha...

9.8CVSS7.4AI score0.0082EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/05/11 3:00 p.m.•47 views

CVE-2023-2661 SourceCodester Online Computer and Laptop Store Master.php sql injection

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit ha...

6.5CVSS10AI score0.0082EPSS
SaveExploits1References3
Rows per page
Query Builder