Lucene search
+L

953 matches found

CNVD
CNVD
added 2022/07/01 12:0 a.m.46 views

SourceCodester Online Railway Reservation System SQL注入漏洞(CNVD-2022-53360)

Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or potential passengers to browse their schedules and reserve seats. sourceCodester Online Railway Reservation System v1.0 is vulnerable to a SQL...

7.2CVSS2.4AI score0.00909EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/01/25 12:0 a.m.35 views

SourceCodester Online Railway Reservation system SQL注入漏洞

SourceCodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or potential passengers to browse their schedules and reserve seats. sourceCodester Online Railway Reservation system is vulnerable to a SQL injection...

10CVSS3.7AI score0.01556EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/01/25 12:0 a.m.27 views

SourceCodester Online Leave Management System SQL注入漏洞

SourceCodester Online Leave Management System is an online leave management system. v1 of SourceCodester Online Leave Management System is vulnerable to SQL injection. system/classes/Login.php parameter lacks effective filtering and escaping, which can be exploited to execute arbitrary SQL comman...

9.8CVSS3.3AI score0.01356EPSS
SaveExploits1References1
Prion
Prion
added 2022/01/24 7:15 p.m.23 views

Sql injection

SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

7.5CVSS9.9AI score0.01289EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/01/24 6:53 p.m.25 views

CVE-2021-43420

SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

10AI score0.01289EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/01/24 3:15 p.m.3 views

CVE-2021-40596

SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to execute arbitrary SQL commands via the facultyid parameter...

9.8CVSS7.6AI score0.01254EPSS
SaveExploits1References2
Prion
Prion
added 2022/01/21 8:15 p.m.16 views

Sql injection

SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leavesystem/classes/Login.php...

7.5CVSS9.8AI score0.01356EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2022/01/21 4:15 p.m.20 views

CVE-2021-46201

An SQL Injection vulnerability exists in Sourcecodester Online Resort Management System 1.0 via the id parameterv in /orms/ node...

10CVSS0.01556EPSS
SaveExploits1References1
OSV
OSV
added 2022/01/20 7:15 p.m.4 views

CVE-2021-44090

An SQL Injection vulnerability exists in Sourcecodester Online Reviewer System 1.0 via the password parameter...

9.8CVSS7.4AI score0.0111EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/01/20 12:0 a.m.4 views

Online Reviewer System SQL注入漏洞

Online Reviewer System is a software application. An Online Reviewer System. A SQL injection vulnerability exists in Online Reviewer System, which originates from the product's password parameter not effectively filtering user input data for special characters. The vulnerability can be exploited ...

9.8CVSS8.7AI score0.0111EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/10 2:10 p.m.10 views

CVE-2021-45334

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

9.8CVSS5.8AI score0.02761EPSS
SaveExploits1References4
NVD
NVD
added 2022/01/10 2:10 p.m.31 views

CVE-2021-45334

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

9.8CVSS0.02761EPSS
SaveExploits1References4
Prion
Prion
added 2022/01/10 2:10 p.m.17 views

Sql injection

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

7.5CVSS10AI score0.02761EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2022/01/09 6:57 p.m.29 views

CVE-2021-45334

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

10AI score0.02761EPSS
SaveExploits1References4
Check Point Advisories
Check Point Advisories
added 2021/12/15 12:0 a.m.42 views

Sourcecodester Online Event Booking and Reservation System SQL Injection (CVE-2021-42667)

An SQL injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5.3AI score0.15806EPSS
SaveExploits3
NVD
NVD
added 2021/11/15 4:15 p.m.12 views

CVE-2021-42580

Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file /admin/login.php and authenticated file upload in Master.php file , we can craft these two vunlerablities to get unauthenticated remote command execution...

9.8CVSS0.09985EPSS
SaveExploits4References5
Cvelist
Cvelist
added 2021/11/15 3:57 p.m.23 views

CVE-2021-42580

Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file /admin/login.php and authenticated file upload in Master.php file , we can craft these two vunlerablities to get unauthenticated remote command execution...

10AI score0.09985EPSS
SaveExploits4References5
CNNVD
CNNVD
added 2021/11/15 12:0 a.m.7 views

Sourcecodester Pisay Online E-Learning System SQL注入漏洞

Sourcecodester Online Learning System is an online e-learning system based on PHP and MySQL. sourcecodester Online Learning System has a SQL injection vulnerability in v2.0, which stems from the application's lack of validation of external input SQL statements. An attacker can use this...

9.8CVSS6.2AI score0.09985EPSS
SaveExploits4References9
ATTACKERKB
ATTACKERKB
added 2021/11/08 6:15 p.m.5 views

CVE-2021-40577

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 in the Add-Users page via the Name parameter...

5.4CVSS6.1AI score0.01635EPSS
SaveExploits4References4
CVE
CVE
added 2021/11/08 5:45 p.m.68 views

CVE-2021-40577

CVE-2021-40577 is a stored XSS vulnerability in the Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, affecting the Add-Users page via the Name parameter. The issue arises from storing unsanitized input that is later reflected, enabling a persistent script...

5.4CVSS5.4AI score0.01635EPSS
SaveExploits4References2Affected Software1
Rows per page
Query Builder