Lucene search
+L

16594 matches found

NVD
NVD
added 2024/05/14 3:14 p.m.31 views

CVE-2024-28277

In Sourcecodester School Task Manager v1.0, a vulnerability was identified within the subjectname= parameter, enabling Stored Cross-Site Scripting XSS attacks. This vulnerability allows attackers to manipulate the subject's name, potentially leading to the execution of malicious JavaScript payloa...

6.1CVSS5.5AI score0.00362EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/14 12:00 a.m.7 views

Computer Laboratory Management System 安全漏洞

Computer Laboratory Management System is a computer laboratory management system. A security vulnerability exists in Sourcecodester Computer Laboratory Management System version 1.0, which originates from a cross-site scripting vulnerability that allows remote attackers to inject arbitrary web...

6.1CVSS6AI score0.00572EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/05/14 12:00 a.m.6 views

Computer Laboratory Management System 安全漏洞

Computer Laboratory Management System is a computer laboratory management system. A security vulnerability exists in Sourcecodester Computer Laboratory Management System version 1.0, which originates from a cross-site scripting vulnerability that allows remote attackers to inject arbitrary web...

7.3CVSS6AI score0.00871EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/05/14 12:00 a.m.11 views

Human Resource Management System 安全漏洞

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Sourcecodester Human Resource Management System version 1.0, which stems from vulnerability to unsecured privileges...

8.8CVSS6.8AI score0.00845EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/05/14 12:00 a.m.9 views

Human Resource Management System 安全漏洞

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Sourcecodester Human Resource Management System version 1.0, which stems from vulnerability to SQL injection attacks...

7.5CVSS7.7AI score0.0078EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2024/05/14 12:00 a.m.7 views

PT-2024-12026 · Sourcecodester · Sourcecodester Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Customer Relationship Management System version 1.0 Description: The issue allows an attacker to execute arbitrary code via the name parameter in the "get-quote.php" endpoint. This enables the attacker to potentially...

5.4CVSS7.6AI score0.00639EPSS
SaveExploits3References9
CNNVD
CNNVD
added 2024/05/14 12:00 a.m.12 views

School Task Manager Security Vulnerability

School Task Manager is a school task manager by rems individual developer. A security vulnerability exists in Sourcecodester School Task Manager version 1.0 that stems from the presence of a stored cross-site scripting XSS attack that results in the execution of a malicious JavaScript payload...

6.1CVSS5.9AI score0.00362EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/14 12:00 a.m.6 views

Human Resource Management System 安全漏洞

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Sourcecodester Human Resource Management System version 1.0, which stems from vulnerability to SQL injection attacks...

5.9CVSS7.8AI score0.00392EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/05/14 12:00 a.m.9 views

Human Resource Management System 安全漏洞

Human Resource Management System is a human resource management system by maverickosama Individual Developer. A security vulnerability exists in Sourcecodester Human Resource Management System version 1.0, which stems from the presence of insecure privileges...

4.3CVSS6.8AI score0.00477EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/05/14 12:00 a.m.14 views

CASAP Automated Enrollment 安全漏洞

CASAP Automated Enrollment is an automated enrollment system for the CASAP organization in the United States. The purpose of this project is to provide an automated enrollment system for CASAP to streamline the process for schools and make it more effective, efficient, and easily retrievable. A...

9.8CVSS7.5AI score0.0071EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/05/14 12:00 a.m.12 views

PT-2024-12025 · Sourcecodester · Sourcecodester Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Customer Relationship Management System version 1.0 Description: The issue allows an attacker to execute arbitrary code. This can be achieved via the company or query parameters in a Cross Site Scripting vulnerability, o...

5.4CVSS7AI score0.00639EPSS
SaveExploits3References9
CVE
CVE
added 2024/05/13 7:57 p.m.99 views

CVE-2024-28276

Sourcecodester School Task Manager 1.0 is affected by a Cross-Site Scripting (XSS) flaw exploitable via add-task.php?task_name=. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE/CVEList, CVE enrichment feeds) with the same root cause: unsanitized input in the task_name p...

6.1CVSS6AI score0.00286EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/05/13 7:57 p.m.42 views

CVE-2024-28276

Sourcecodester School Task Manager 1.0 is vulnerable to Cross Site Scripting XSS via add-task.php?taskname=...

6AI score0.00286EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/13 7:51 p.m.50 views

CVE-2024-28277

In Sourcecodester School Task Manager v1.0, a vulnerability was identified within the subjectname= parameter, enabling Stored Cross-Site Scripting XSS attacks. This vulnerability allows attackers to manipulate the subject's name, potentially leading to the execution of malicious JavaScript payloa...

5.7AI score0.00362EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/13 7:51 p.m.75 views

CVE-2024-28277

CVE-2024-28277 affects Sourcecodester School Task Manager v1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) in the subject_name/subject name parameter, allowing an attacker to manipulate the subject’s name and potentially execute malicious JavaScript payloads. Root cause is unvalidat...

6.1CVSS5.7AI score0.00362EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/13 7:51 p.m.19 views

CVE-2024-28277

In Sourcecodester School Task Manager v1.0, a vulnerability was identified within the subjectname= parameter, enabling Stored Cross-Site Scripting XSS attacks. This vulnerability allows attackers to manipulate the subject's name, potentially leading to the execution of malicious JavaScript payloa...

5.8AI score0.00362EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/13 7:21 p.m.14 views

CVE-2024-34231

A cross-site scripting XSS vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Short Name parameter...

5.8AI score0.00486EPSS
SaveExploits1References1
CVE
CVE
added 2024/05/13 7:21 p.m.81 views

CVE-2024-34231

CVE-2024-34231 affects Sourcecodester Laboratory Management System v1.0 with a cross-site scripting (XSS) flaw exploitable via a crafted payload in the System Short Name parameter. The issue enables attackers to execute arbitrary web scripts or HTML, with CVSSv3.1 base score 7.1 (HIGH) and user i...

7.1CVSS5.8AI score0.00486EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2024/05/13 7:17 p.m.36 views

CVE-2024-34230

A cross-site scripting XSS vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Information parameter...

5.7AI score0.00472EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/05/13 7:17 p.m.20 views

CVE-2024-34230

A cross-site scripting XSS vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Information parameter...

5.8AI score0.00472EPSS
SaveExploits1References1
Rows per page
Query Builder