542 matches found
CVE-2022-2748: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Simple Online Book Store System. It has been classified as problematic. Affected is an unknown function of the file /admin/edit.php. The manipulation of the argument eid leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2022-2747: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple Online Book Store and classified as critical. This issue affects some unknown processing of the file book.php. The manipulation of the argument bookisbn leads to sql injection. The attack may be initiated remotely. The associated identifier of th...
CVE-2022-2746: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. This vulnerability affects unknown code of the file Admin add.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-206014 is the identifier assigne...
CVE-2022-2722 SourceCodester Simple Student Information System manage_course.php sql injection
A vulnerability was found in SourceCodester Simple Student Information System and classified as critical. This issue affects some unknown processing of the file managecourse.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2022-2722: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple Student Information System and classified as critical. This issue affects some unknown processing of the file managecourse.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2022-2705
A vulnerability was found in SourceCodester Simple Student Information System. It has been rated as critical. This issue affects some unknown processing of the file admin/departments/managedepartment.php. The manipulation of the argument id with the input...
CVE-2022-2699: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple E-Learning System. It has been rated as critical. Affected by this issue is some unknown functionality of the file /claireblake. The manipulation of the argument phoneNumber leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2022-2705: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple Student Information System. It has been rated as critical. This issue affects some unknown processing of the file admin/departments/managedepartment.php. The manipulation of the argument id with the input...
CVE-2022-2704: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as problematic. This vulnerability affects unknown code of the file downloadFiles.php. The manipulation of the argument download leads to information disclosure. The attack can be initiated remotely. The...
CVE-2022-2701: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in SourceCodester Simple E-Learning System. This vulnerability affects unknown code of the file /claireblake. The manipulation of the argument Bio leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclose...
CVE-2022-2698: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument searchPost leads to sql injection. The attack can be launched remotely. The...
CVE-2022-2697: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple E-Learning System. It has been classified as critical. Affected is an unknown function of the file commentframe.php. The manipulation of the argument postid leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...
CVE-2022-2683
A vulnerability, which was classified as problematic, was found in SourceCodester Simple Food Ordering System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password with the input "alert1 leads to cross site scripting. It is possible to initiate...
CVE-2022-2683: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in SourceCodester Simple Food Ordering System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password with the input " leads to cross site scripting. It is possible to initiate the...
PT-2022-18088 · Unknown · Sourcecodester Simple Food Ordering System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Food Ordering System version 1.0 Description: A problematic issue was found in the system, affecting the /login.php file. The manipulation of the email and password arguments with the input "alert1 leads to cross-site...
CVE-2022-2665: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in SourceCodester Simple E-Learning System. Affected by this vulnerability is an unknown functionality of the file classroom.php. The manipulation of the argument postid leads to sql injection. The attack can be launched remotely. The exploit has...
CVE-2022-2489
A vulnerability was found in SourceCodester Simple E-Learning System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classRoom.php. The manipulation of the argument classCode with the input 1'||SELECT 0x6770715a WHERE 8795=8795 AND SELECT 8342 FROMSELECT...
CVE-2022-2489
A vulnerability was found in SourceCodester Simple E-Learning System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classRoom.php. The manipulation of the argument classCode with the input 1'||SELECT 0x6770715a WHERE 8795=8795 AND SELECT 8342 FROMSELECT...
CVE-2022-2489 SourceCodester Simple E-Learning System classRoom.php sql injection
A vulnerability was found in SourceCodester Simple E-Learning System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classRoom.php. The manipulation of the argument classCode with the input 1'||SELECT 0x6770715a WHERE 8795=8795 AND SELECT 8342 FROMSELECT...
PT-2022-16969
Name of the Vulnerable Software and Affected Versions SourceCodester Simple E-Learning System version 1.0 Description A critical vulnerability has been found in the SourceCodester Simple E-Learning System. The issue is related to an unknown function of the file search.php. The manipulation of the...