Lucene search
+L

20170 matches found

osv_cve
osv_cve
•added 2024/10/15 2:15 a.m.•22 views

CVE-2024-9952

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/?page=systeminfo/contactinfo of the component Contact Information Page. The manipulation of the argument Address leads to cross site...

4.8CVSS3.2AI score0.00438EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/10/15 2:00 a.m.•42 views

CVE-2024-9952 SourceCodester Online Eyewear Shop Contact Information Page contact_info cross site scripting

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/?page=systeminfo/contactinfo of the component Contact Information Page. The manipulation of the argument Address leads to cross site...

5.1CVSS0.00438EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/10/15 2:00 a.m.•28 views

CVE-2024-9952 SourceCodester Online Eyewear Shop Contact Information Page contact_info cross site scripting

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/?page=systeminfo/contactinfo of the component Contact Information Page. The manipulation of the argument Address leads to cross site...

5.1CVSS3.2AI score0.00438EPSS
SaveExploits1References5
CVE
CVE
•added 2024/10/15 2:00 a.m.•79 views

CVE-2024-9952

CVE-2024-9952 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability is in the Contact Information Page (file path /admin/?page=system_info/contact_info) where manipulation of the Address parameter can lead to cross-site scripting. It may be exploited remotely and is cited with varied ...

5.1CVSS3.2AI score0.00438EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2024/10/15 12:00 a.m.•37 views

SourceCodester Online Eyewear Shop SQL Injection Vulnerability

SourceCodester Online Eyewear Shop is a SourceCodester open source online eyewear store website project developed using PHP and MySQL, which provides an online shopping and ordering platform for eyewear business and its potential customers. A SQL injection vulnerability exists in SourceCodester...

9.8CVSS6.6AI score0.00515EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/15 12:00 a.m.•10 views

CVE-2024-9973: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=reports of the component Report Viewing Page. The manipulation of the argument date leads to sql injection. It is possible to launch th...

9.8CVSS6.3AI score0.00515EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/15 12:00 a.m.•9 views

CVE-2024-9952: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/?page=systeminfo/contactinfo of the component Contact Information Page. The manipulation of the argument Address leads to cross site...

5.1CVSS3.2AI score0.00438EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/15 12:00 a.m.•21 views

SourceCodester Drag and Drop Image Upload Code Vulnerabilities

SourceCodester Drag and Drop Image Upload is an open source drag and drop image upload program from SourceCodester. A code issue vulnerability exists in SourceCodester Drag and Drop Image Upload version 1.0, which stems from an unrestricted file upload issue contained in the /upload.php file...

8.8CVSS6.6AI score0.00579EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/15 12:00 a.m.•9 views

CVE-2024-9974: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file classes/Master.php?f=addtocard of the component POST Request Handler. The manipulation of the argument productid leads to s...

9.8CVSS6.4AI score0.0057EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/15 12:00 a.m.•22 views

SourceCodester Online Eyewear Shop Cross-site Script Vulnerability

SourceCodester Online Eyewear Shop is a SourceCodester open source online eyewear store website project developed using PHP and MySQL, which provides an online shopping and ordering platform for the eyewear business and its potential customers. A cross-site scripting vulnerability exists in...

5.1CVSS4.6AI score0.00438EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2024/10/15 12:00 a.m.•7 views

PT-2024-39973

Name of the Vulnerable Software and Affected Versions SourceCodester Drag and Drop Image Upload version 1.0 Description A critical issue affects some unknown functionality of the file /upload.php, leading to unrestricted upload. The attack can be launched remotely. Recommendations For version 1.0...

8.8CVSS6.4AI score0.00579EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/15 12:00 a.m.•7 views

CVE-2024-9975: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Drag and Drop Image Upload 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /upload.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclos...

8.8CVSS6.1AI score0.00579EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/10/14 12:00 a.m.•20 views

PT-2024-39963 · Sourcecodester · Sourcecodester Online Eyewear Shop

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Eyewear Shop version 1.0 Description: A problem was discovered in the Contact Information Page, affecting the file "/admin/?page=system info/contact info". The manipulation of the Address argument leads to cross-site...

5.1CVSS4.5AI score0.00438EPSS
SaveExploits1References11
osv_cve
osv_cve
•added 2024/10/13 4:15 a.m.•21 views

CVE-2024-9906

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /admin/?page=inventory/viewinventory&id=2. The manipulation of the argument Code leads to cross site scripting. It is possible to launch the attac...

5.4CVSS3.5AI score0.00438EPSS
SaveExploits1References5
NVD
NVD
•added 2024/10/13 4:15 a.m.•41 views

CVE-2024-9906

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /admin/?page=inventory/viewinventory&id=2. The manipulation of the argument Code leads to cross site scripting. It is possible to launch the attac...

5.4CVSS0.00438EPSS
SaveExploits1References5
CVE
CVE
•added 2024/10/13 4:00 a.m.•126 views

CVE-2024-9906

The CVE-2024-9906 entry affects SourceCodester Online Eyewear Shop 1.0. The vulnerability exists in the admin endpoint /admin/?page=inventory/view_inventory&id=2 where manipulating the Code argument triggers cross-site scripting. It can be exploited remotely and has been disclosed publicly. Affec...

5.4CVSS3.5AI score0.00438EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/13 4:00 a.m.•24 views

CVE-2024-9906 SourceCodester Online Eyewear Shop cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /admin/?page=inventory/viewinventory&id=2. The manipulation of the argument Code leads to cross site scripting. It is possible to launch the attac...

5.3CVSS3.5AI score0.00438EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/10/13 4:00 a.m.•47 views

CVE-2024-9906 SourceCodester Online Eyewear Shop cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /admin/?page=inventory/viewinventory&id=2. The manipulation of the argument Code leads to cross site scripting. It is possible to launch the attac...

5.3CVSS0.00438EPSS
SaveExploits1References5
NVD
NVD
•added 2024/10/13 3:15 a.m.•33 views

CVE-2024-9905

A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the file /admin/?page=inventory/viewinventory&id=2. The manipulation of the argument id leads to sql injection. The attack may be initiated...

8.8CVSS0.00532EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2024/10/13 3:15 a.m.•19 views

CVE-2024-9905

A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue affects some unknown processing of the file /admin/?page=inventory/viewinventory&id=2. The manipulation of the argument id leads to sql injection. The attack may be initiated...

8.8CVSS6.4AI score0.00532EPSS
SaveExploits1References5
Rows per page
Query Builder