Lucene search
+L

542 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/11 12:00 a.m.•5 views

CVE-2022-2748: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Simple Online Book Store System. It has been classified as problematic. Affected is an unknown function of the file /admin/edit.php. The manipulation of the argument eid leads to cross site scripting. It is possible to launch the attack remotely. The...

6.1CVSS4.6AI score0.00462EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/11 12:00 a.m.•7 views

CVE-2022-2747: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple Online Book Store and classified as critical. This issue affects some unknown processing of the file book.php. The manipulation of the argument bookisbn leads to sql injection. The attack may be initiated remotely. The associated identifier of th...

9.8CVSS8.1AI score0.00627EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/11 12:00 a.m.•3 views

CVE-2022-2746: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. This vulnerability affects unknown code of the file Admin add.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-206014 is the identifier assigne...

9.8CVSS7.7AI score0.0056EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/08/09 7:10 a.m.•11 views

CVE-2022-2722 SourceCodester Simple Student Information System manage_course.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System and classified as critical. This issue affects some unknown processing of the file managecourse.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.3CVSS7.6AI score0.00867EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/09 12:00 a.m.•5 views

CVE-2022-2722: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple Student Information System and classified as critical. This issue affects some unknown processing of the file managecourse.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS8AI score0.00867EPSS
SaveExploits1References2
NVD
NVD
•added 2022/08/08 1:15 p.m.•35 views

CVE-2022-2705

A vulnerability was found in SourceCodester Simple Student Information System. It has been rated as critical. This issue affects some unknown processing of the file admin/departments/managedepartment.php. The manipulation of the argument id with the input...

9.8CVSS0.00754EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/08 12:00 a.m.•7 views

CVE-2022-2699: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple E-Learning System. It has been rated as critical. Affected by this issue is some unknown functionality of the file /claireblake. The manipulation of the argument phoneNumber leads to sql injection. The attack may be launched remotely. The exploit...

7.5CVSS7AI score0.00666EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/08 12:00 a.m.•4 views

CVE-2022-2705: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple Student Information System. It has been rated as critical. This issue affects some unknown processing of the file admin/departments/managedepartment.php. The manipulation of the argument id with the input...

9.8CVSS8AI score0.00754EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/08 12:00 a.m.•5 views

CVE-2022-2704: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as problematic. This vulnerability affects unknown code of the file downloadFiles.php. The manipulation of the argument download leads to information disclosure. The attack can be initiated remotely. The...

7.5CVSS6.8AI score0.0082EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/08 12:00 a.m.•5 views

CVE-2022-2701: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Simple E-Learning System. This vulnerability affects unknown code of the file /claireblake. The manipulation of the argument Bio leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclose...

6.1CVSS4.5AI score0.00537EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/07 12:00 a.m.•6 views

CVE-2022-2698: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument searchPost leads to sql injection. The attack can be launched remotely. The...

9.8CVSS8AI score0.00754EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/07 12:00 a.m.•6 views

CVE-2022-2697: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple E-Learning System. It has been classified as critical. Affected is an unknown function of the file commentframe.php. The manipulation of the argument postid leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...

7.5CVSS7AI score0.00639EPSS
SaveExploits1References2
NVD
NVD
•added 2022/08/05 9:15 p.m.•19 views

CVE-2022-2683

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Food Ordering System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password with the input "alert1 leads to cross site scripting. It is possible to initiate...

5.4CVSS0.00656EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/05 12:00 a.m.•5 views

CVE-2022-2683: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Food Ordering System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password with the input " leads to cross site scripting. It is possible to initiate the...

5.4CVSS4.2AI score0.00656EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/08/05 12:00 a.m.•15 views

PT-2022-18088 · Unknown · Sourcecodester Simple Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Food Ordering System version 1.0 Description: A problematic issue was found in the system, affecting the /login.php file. The manipulation of the email and password arguments with the input "alert1 leads to cross-site...

5.4CVSS5.1AI score0.00656EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/05 12:00 a.m.•5 views

CVE-2022-2665: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Simple E-Learning System. Affected by this vulnerability is an unknown functionality of the file classroom.php. The manipulation of the argument postid leads to sql injection. The attack can be launched remotely. The exploit has...

8.8CVSS7.5AI score0.00585EPSS
SaveExploits0References2
NVD
NVD
•added 2022/07/20 12:15 p.m.•31 views

CVE-2022-2489

A vulnerability was found in SourceCodester Simple E-Learning System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classRoom.php. The manipulation of the argument classCode with the input 1'||SELECT 0x6770715a WHERE 8795=8795 AND SELECT 8342 FROMSELECT...

8.8CVSS0.00776EPSS
SaveExploits1References2
OSV
OSV
•added 2022/07/20 12:15 p.m.•11 views

CVE-2022-2489

A vulnerability was found in SourceCodester Simple E-Learning System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classRoom.php. The manipulation of the argument classCode with the input 1'||SELECT 0x6770715a WHERE 8795=8795 AND SELECT 8342 FROMSELECT...

8.8CVSS5.8AI score0.00776EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/07/20 11:35 a.m.•39 views

CVE-2022-2489 SourceCodester Simple E-Learning System classRoom.php sql injection

A vulnerability was found in SourceCodester Simple E-Learning System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classRoom.php. The manipulation of the argument classCode with the input 1'||SELECT 0x6770715a WHERE 8795=8795 AND SELECT 8342 FROMSELECT...

6.3CVSS9.1AI score0.00776EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/07/20 12:00 a.m.•2 views

PT-2022-16969

Name of the Vulnerable Software and Affected Versions SourceCodester Simple E-Learning System version 1.0 Description A critical vulnerability has been found in the SourceCodester Simple E-Learning System. The issue is related to an unknown function of the file search.php. The manipulation of the...

8.8CVSS0.00776EPSS
SaveExploits1References6
Rows per page
Query Builder