Lucene search
+L

542 matches found

Cvelist
Cvelist
•added 2023/12/08 4:31 p.m.•42 views

CVE-2023-6616 SourceCodester Simple Student Attendance System index.php cross site scripting

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack may be initiated remotely. The exploit...

4CVSS6.2AI score0.00608EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/08 12:00 a.m.•3 views

CVE-2023-6619: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /modals/classform.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to th...

9.8CVSS6.2AI score0.00796EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/08 12:00 a.m.•5 views

CVE-2023-6616: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack may be initiated remotely. The exploit...

6.1CVSS3.7AI score0.00608EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/08 12:00 a.m.•1 views

CVE-2023-6618: External Control of File Name or Path

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The exploit has been disclosed to...

8.8CVSS6AI score0.00862EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/12/08 12:00 a.m.•12 views

SourceCodester Simple Student Attendance System Security Vulnerability

Simple Student Attendance System is a simple student attendance system. A security vulnerability exists in SourceCodester Simple Student Attendance System version 1.0, which originates from a file inclusion vulnerability in the file index.php...

8.8CVSS6AI score0.00862EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/08 12:00 a.m.•4 views

CVE-2023-6617: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as critical. Affected is an unknown function of the file attendance.php. The manipulation of the argument classid leads to sql injection. The exploit has been disclosed to the public and may b...

9.8CVSS6.1AI score0.00796EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/10/26 9:00 p.m.•14 views

CVE-2023-5805 SourceCodester Simple Real Estate Portal System view_estate.php sql injection

A vulnerability was found in SourceCodester Simple Real Estate Portal System 1.0. It has been classified as critical. Affected is an unknown function of the file viewestate.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit h...

6.5CVSS7.3AI score0.00649EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/26 12:00 a.m.•6 views

CVE-2023-5805: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple Real Estate Portal System 1.0. It has been classified as critical. Affected is an unknown function of the file viewestate.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit h...

9.8CVSS6.6AI score0.00649EPSS
SaveExploits1References2
Prion
Prion
•added 2023/09/29 12:15 p.m.•26 views

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...

6.5CVSS9.7AI score0.0082EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/29 12:00 p.m.•10 views

CVE-2023-5260 SourceCodester Simple Membership System group_validator.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...

6.5CVSS7.4AI score0.0082EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/29 12:00 a.m.•2 views

CVE-2023-5260: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...

9.8CVSS6.6AI score0.0082EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/09/17 4:31 p.m.•18 views

CVE-2023-5027 SourceCodester Simple Membership System club_validator.php sql injection

A vulnerability classified as critical was found in SourceCodester Simple Membership System 1.0. Affected by this vulnerability is an unknown functionality of the file clubvalidator.php. The manipulation of the argument club leads to sql injection. The attack can be launched remotely. The exploit...

6.5CVSS7.4AI score0.00611EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/17 12:00 a.m.•3 views

CVE-2023-5027: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Simple Membership System 1.0. Affected by this vulnerability is an unknown functionality of the file clubvalidator.php. The manipulation of the argument club leads to sql injection. The attack can be launched remotely. The exploit...

7.5CVSS6.5AI score0.00611EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/09/09 10:00 a.m.•10 views

CVE-2023-4848 SourceCodester Simple Book Catalog App delete_book.php sql injection

A vulnerability classified as critical was found in SourceCodester Simple Book Catalog App 1.0. Affected by this vulnerability is an unknown functionality of the file deletebook.php. The manipulation of the argument delete leads to sql injection. The attack can be launched remotely. The exploit h...

6.5CVSS7.4AI score0.00798EPSS
SaveExploits1References3
NVD
NVD
•added 2023/09/09 8:15 a.m.•21 views

CVE-2023-4847

A vulnerability classified as problematic has been found in SourceCodester Simple Book Catalog App 1.0. Affected is an unknown function of the component Update Book Form. The manipulation of the argument booktitle/bookauthor leads to cross site scripting. It is possible to launch the attack...

6.1CVSS4.5AI score0.00604EPSS
SaveExploits1References3
Prion
Prion
•added 2023/09/09 8:15 a.m.•33 views

Sql injection

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file deletemember.php. The manipulation of the argument memid leads to sql injection. The attack may be initiated remotely. The exploit has be...

6.5CVSS7.9AI score0.00611EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/09 8:00 a.m.•11 views

CVE-2023-4847 SourceCodester Simple Book Catalog App Update Book Form cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Simple Book Catalog App 1.0. Affected is an unknown function of the component Update Book Form. The manipulation of the argument booktitle/bookauthor leads to cross site scripting. It is possible to launch the attack...

4CVSS6.4AI score0.00604EPSS
SaveExploits1References3
Prion
Prion
•added 2023/09/09 7:15 a.m.•31 views

Sql injection

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file accounteditquery.php. The manipulation of the argument adminid leads to sql injection. The attack can be initiated remotely. The exploit...

6.5CVSS9.7AI score0.00743EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/09 12:00 a.m.•2 views

CVE-2023-4845: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file accounteditquery.php. The manipulation of the argument adminid leads to sql injection. The attack can be initiated remotely. The exploit...

9.8CVSS6.7AI score0.00743EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/09 12:00 a.m.•2 views

CVE-2023-4848: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Simple Book Catalog App 1.0. Affected by this vulnerability is an unknown functionality of the file deletebook.php. The manipulation of the argument delete leads to sql injection. The attack can be launched remotely. The exploit h...

9.8CVSS6.6AI score0.00798EPSS
SaveExploits1References2
Rows per page
Query Builder