Lucene search
+L

953 matches found

OSV
OSV
added 2025/04/16 5:15 p.m.5 views

CVE-2024-40073

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at idgenerator/admin/?page=generate&template=4...

9.8CVSS5.8AI score0.00476EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/16 5:15 p.m.25 views

CVE-2024-40073

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the template parameter at idgenerator/admin/?page=generate&template=4...

9.8CVSS0.00476EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/16 5:15 p.m.6 views

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/Users.php?f=save, and the point of vulnerability is in the POST parameter 'firstname' and 'lastname'...

5.4CVSS5.8AI score0.00256EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/16 5:15 p.m.18 views

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

5.1CVSS0.0025EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/16 5:15 p.m.5 views

CVE-2024-40068

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=templates/managetemplate&id=1...

5.9CVSS5.8AI score0.00235EPSS
SaveExploits1References1
CVE
CVE
added 2025/04/16 1:31 p.m.87 views

CVE-2025-3692

CVE-2025-3692 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability lies in an unknown functionality exercised by the file /oews/classes/Master.php?f=save_product, enabling cross-site scripting. The attack is possible remotely and the exploit has been disclosed publicly. Connected sou...

5.4CVSS3.5AI score0.00344EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/04/16 12:0 a.m.23 views

CVE-2024-40071

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

0.00712EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/04/16 12:0 a.m.3 views

SourceCodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an open source online identity generator system from SourceCodester. A security vulnerability exists in SourceCodester Online ID Generator System version 1.0, which stems from a stored cross-site scripting attack due to misuse of the parameter shortnam...

4.8CVSS6AI score0.00256EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/04/16 12:0 a.m.4 views

SourceCodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an open source online identity generator system from SourceCodester. A security vulnerability exists in SourceCodester Online ID Generator System version 1.0, which stems from a stored cross-site scripting attack due to incorrect manipulation of the...

5.4CVSS6AI score0.00256EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/04/16 12:0 a.m.21 views

CVE-2024-40072

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=generate/index&id=1...

0.00476EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/04/16 12:0 a.m.9 views

CVE-2024-40068

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at idgenerator/admin/?page=templates/managetemplate&id=1...

6.1AI score0.00235EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/04/16 12:0 a.m.10 views

CVE-2024-40071

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

8.4AI score0.00712EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/16 12:0 a.m.25 views

CVE-2024-40074

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/SystemSettings.php?f=updatesettings, and the point of vulnerability is in the POST parameter 'shortname'...

0.00256EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/04/16 12:0 a.m.6 views

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

5.9AI score0.0025EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/16 12:0 a.m.19 views

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

0.0025EPSS
SaveExploits1References1
CVE
CVE
added 2025/04/16 12:0 a.m.61 views

CVE-2024-40074

CVE-2024-40074 affects SourceCodester Online ID Generator System 1.0. The flaw is a Stored Cross-Site Scripting (XSS) vulnerability in id_generator/classes/SystemSettings.php?f=update_settings, with the point of vulnerability in the POST parameter short_name. CVSSv3.1 base score 4.8 (MEDIUM), net...

4.8CVSS6.1AI score0.00256EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2025/04/16 12:0 a.m.59 views

CVE-2024-40070

CVE-2024-40070 affects Sourcecodester Online ID Generator System 1.0. The issue is an arbitrary file upload vulnerability at id_generator/classes/Users.php?f=save that allows an attacker to execute arbitrary PHP code by uploading a crafted file. The connected documents provide concrete details ab...

5.1CVSS8.3AI score0.0025EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2025/04/16 12:0 a.m.54 views

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 is affected by a Stored Cross-Site Scripting (XSS) flaw in id_generator/classes/Users.php?f=save, triggered by the POST parameters firstname and lastname. Root cause is unescaped user input leading to script execution in the context of authenticated/u...

5.4CVSS6.4AI score0.00256EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/07 10:53 a.m.21 views

CVE-2025-3298

A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=saveproduct of the component Registration Handler. The manipulation of the argument email leads...

5.3CVSS7AI score0.00385EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/04/07 9:27 a.m.28 views

CVE-2025-3297

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /classes/Master.php?f=saveproduct. The manipulation of the argument brand leads to cross site scripting. It is possible to launch the attack...

5.1CVSS6.3AI score0.00385EPSS
SaveExploits1References1
Rows per page
Query Builder