Lucene search
+L

540 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/03 12:00 a.m.•3 views

CVE-2021-41492: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System POS 1.0 via the 1 Product Code in the pos page in cashiering. 2 id parameter in manageproducts and the 3 t paramater in actions.php...

9.8CVSS8.3AI score0.01693EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/03 12:00 a.m.•5 views

CVE-2021-43141: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in planapplication...

6.1CVSS5.8AI score0.01442EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/11/03 12:00 a.m.•9 views

PT-2021-23751 · Unknown · Sourcecodester Simple Subscription Website

Name of the Vulnerable Software and Affected Versions: Sourcecodester Simple Subscription Website version 1.0 Description: A SQL Injection issue exists via the login, allowing potential exploitation. Recommendations: For version 1.0, consider disabling the login functionality until a patch is...

9.8CVSS9.9AI score0.04729EPSS
SaveExploits4References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/03 12:00 a.m.•3 views

CVE-2021-43140: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login...

9.8CVSS5.9AI score0.04729EPSS
SaveExploits4References2
CNVD
CNVD
•added 2021/09/16 12:00 a.m.•34 views

SourceCodester Simple Food Website SQL Injection Vulnerability

SourceCodester Simple Food Website is a CMS by SourceCodester, Inc. developed using PHP and MySQL database. sourcecodester Basic Shopping Cart is vulnerable to SQL injection, which can be exploited by attackers to bypass authentication Become an administrator...

9.8CVSS3.3AI score0.02916EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/07/30 2:15 p.m.•8 views

CVE-2021-34166

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin...

9.8CVSS7.3AI score0.02916EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/07/28 3:04 p.m.•33 views

CVE-2021-34166

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin...

9.8AI score0.02916EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/28 12:00 a.m.•5 views

CVE-2021-34166: Improper Neutralization of Special Elements used in an SQL Command

A SQL INJECTION vulnerability in Sourcecodester Simple Food Website 1.0 allows a remote attacker to Bypass Authentication and become Admin...

9.8CVSS5.9AI score0.02916EPSS
SaveExploits1References2
NVD
NVD
•added 2021/07/22 5:15 p.m.•28 views

CVE-2021-26232

SQL injection vulnerability in SourceCodester Simple College Website v 1.0 allows remote attackers to execute arbitrary SQL statements via the id parameter to news.php...

9.8CVSS0.02705EPSS
SaveExploits1References1
Prion
Prion
•added 2021/07/22 5:15 p.m.•20 views

Sql injection

SQL injection vulnerability in SourceCodester Simple College Website v 1.0 allows remote attackers to execute arbitrary SQL statements via the id parameter to news.php...

7.5CVSS9.8AI score0.02705EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2021/07/22 5:15 p.m.•9 views

CVE-2021-26232

SQL injection vulnerability in SourceCodester Simple College Website v 1.0 allows remote attackers to execute arbitrary SQL statements via the id parameter to news.php...

9.8CVSS9.2AI score0.02705EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/22 12:00 a.m.•5 views

CVE-2021-26232: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SourceCodester Simple College Website v 1.0 allows remote attackers to execute arbitrary SQL statements via the id parameter to news.php...

9.8CVSS6.4AI score0.02705EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/04/02 12:00 a.m.•16 views

Sourcecodester Simple College Website SQL Injection Vulnerability (CNVD-2021-95934)

Sourcecodester Simple College Website is a content management system from Sourcecodester. Sourcecodester Simple College Website suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in database-based applications, which can be exploit...

9.8CVSS7.8AI score0.02986EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/04/02 12:00 a.m.•37 views

Sourcecodester Simple College Website Code Execution Vulnerability

Sourcecodester Simple College Website is a content management system of Sourcecodester. version 1.0 of Sourcecodester Simple College Website contains a code execution vulnerability that can be exploited by attackers to conduct remote code execution...

7.2CVSS5.5AI score0.03183EPSS
SaveExploits1References1
NVD
NVD
•added 2020/11/17 8:15 p.m.•34 views

CVE-2020-28133

An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in salesinventory/login.php...

9.8CVSS10AI score0.02107EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/17 12:00 a.m.•3 views

CVE-2020-28133: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in salesinventory/login.php...

9.8CVSS5.8AI score0.02107EPSS
SaveExploits1References2
OSV
OSV
•added 2020/09/22 6:15 p.m.•16 views

CVE-2020-25515

Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books New Book , http:///lms/index.php?page=books...

7.8CVSS7.1AI score0.00508EPSS
SaveExploits0References3
NVD
NVD
•added 2020/09/22 6:15 p.m.•26 views

CVE-2020-25515

Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books New Book , http:///lms/index.php?page=books...

7.8CVSS0.00508EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/22 12:00 a.m.•5 views

CVE-2020-25514: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Simple Library Management System 1.0 is affected by Incorrect Access Control via the Login Panel, http:// /lms/admin.php...

8.4CVSS5.8AI score0.00571EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/22 12:00 a.m.•4 views

CVE-2020-25515: Unrestricted Upload of File with Dangerous Type

Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books New Book , http:// /lms/index.php?page=books...

7.8CVSS5.8AI score0.00508EPSS
SaveExploits0References6
Rows per page
Query Builder