Lucene search
+L

953 matches found

NVD
NVD
added 2023/04/28 2:15 p.m.13 views

CVE-2023-2371

A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/inquiries/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

9.8CVSS7.5AI score0.00834EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/28 2:15 p.m.6 views

CVE-2023-2372

A vulnerability, which was classified as problematic, has been found in SourceCodester Online DJ Management System 1.0. Affected by this issue is some unknown functionality of the file classes/Master.php?f=saveevent. The manipulation of the argument name leads to cross site scripting. The attack...

4.8CVSS3.9AI score0.0061EPSS
SaveExploits1References3
NVD
NVD
added 2023/04/28 2:15 p.m.17 views

CVE-2023-2370

A vulnerability classified as critical has been found in SourceCodester Online DJ Management System 1.0. Affected is an unknown function of the file admin/events/manageevent.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

9.8CVSS7.4AI score0.00881EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/04/28 2:0 p.m.21 views

CVE-2023-2372 SourceCodester Online DJ Management System cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Online DJ Management System 1.0. Affected by this issue is some unknown functionality of the file classes/Master.php?f=saveevent. The manipulation of the argument name leads to cross site scripting. The attack...

3.3CVSS5.1AI score0.0061EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/04/28 1:31 p.m.11 views

CVE-2023-2371 SourceCodester Online DJ Management System GET Parameter view_details.php sql injection

A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/inquiries/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

6.5CVSS7.5AI score0.00834EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/04/23 3:31 p.m.12 views

CVE-2023-2246 SourceCodester Online Pizza Ordering System unrestricted upload

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/ajax.php?action=savesettings. The manipulation of the argument img leads to unrestricted upload. The attack can be initiated...

6.5CVSS6.9AI score0.03624EPSS
SaveExploits4References3
NVD
NVD
added 2023/04/22 5:15 p.m.29 views

CVE-2023-2244

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

9.8CVSS7.4AI score0.00726EPSS
SaveExploits1References3
Prion
Prion
added 2023/04/22 5:15 p.m.26 views

Sql injection

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

6.5CVSS9.7AI score0.00726EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/04/22 4:31 p.m.33 views

CVE-2023-2244 SourceCodester Online Eyewear Shop GET Parameter update_status.php sql injection

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

6.5CVSS9.9AI score0.00726EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/22 4:15 p.m.4 views

CVE-2023-2242

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component GET Parameter Handler. The manipulation of the argument c/s leads to sql injection. The attack can be...

8.8CVSS6.5AI score0.00729EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/04/22 4:0 p.m.31 views

CVE-2023-2242 SourceCodester Online Computer and Laptop Store GET Parameter sql injection

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component GET Parameter Handler. The manipulation of the argument c/s leads to sql injection. The attack can be...

6.5CVSS9.2AI score0.00729EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/04/19 12:0 a.m.8 views

Sourcecodester Online Jewelry Shop 跨站脚本漏洞

Online Jewelry Shop is an online ordering system for jewelry store or store customers by oretnom23 individual developer. A security vulnerability exists in Sourcecodester Online Jewelry Shop v1.0, which stems from the presence of a cross-site scripting XSS vulnerability that can be exploited by a...

5.4CVSS5.8AI score0.00365EPSS
SaveExploits0References2
OSV
OSV
added 2023/04/11 7:15 p.m.8 views

CVE-2023-1988

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/?page=maintenance/brand. The manipulation of the argument Brand Name leads to cross site scripting. The attack ma...

4.8CVSS3.6AI score0.00646EPSS
SaveExploits1References3
NVD
NVD
added 2023/04/11 7:15 p.m.45 views

CVE-2023-1986

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. Affected is the function deleteorder of the file /classes/master.php?f=deleteorder. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

7.2CVSS6.9AI score0.00767EPSS
SaveExploits1References3
Prion
Prion
added 2023/04/11 7:15 p.m.16 views

Cross site scripting

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/?page=maintenance/brand. The manipulation of the argument Brand Name leads to cross site scripting. The attack ma...

4CVSS4.8AI score0.00646EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2023/04/11 7:15 p.m.23 views

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. Affected is the function deleteorder of the file /classes/master.php?f=deleteorder. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

6.5CVSS7.3AI score0.00767EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2023/04/11 6:15 p.m.20 views

CVE-2023-1985

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. This issue affects the function savebrand of the file /classes/Master.php?f=savebrand. The manipulation of the argument name leads to sql injection. The attack may be initiate...

7.2CVSS6.9AI score0.00767EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/04/11 6:0 p.m.27 views

CVE-2023-1987 SourceCodester Online Computer and Laptop Store update_order_status sql injection

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is the function updateorderstatus of the file /classes/Master.php?f=updateorderstatus. The manipulation of the argument id leads to sql injection. The...

6.5CVSS7.5AI score0.00767EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/04/11 12:0 a.m.7 views

PT-2023-17395 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A vulnerability was found in the software, classified as problematic. It affects some unknown functionality of the file /admin/?page=maintenance/brand. The manipulation ...

4.8CVSS4.4AI score0.00646EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/04/11 12:0 a.m.9 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. An SQL injection vulnerability exists in SourceCodester Online Computer and Laptop Store version 1.0, which stems from an improper manipulation of the parameter name that can lead to sql...

7.2CVSS6.8AI score0.00767EPSS
SaveExploits1References4
Rows per page
Query Builder