Lucene search
+L

20170 matches found

CVE
CVE
•added 2024/08/30 3:00 p.m.•80 views

CVE-2024-8340

CVE-2024-8340 affects SourceCodester Electric Billing Management System 1.0. The vulnerability is a SQL injection in the /Actions.php?a=login endpoint caused by unsafely handling the username parameter, permitting remote exploitation. Public disclosures exist, and several sources (NVD, Red Hat, C...

9.8CVSS7AI score0.00698EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/08/30 2:31 p.m.•19 views

CVE-2024-8339 SourceCodester Electric Billing Management System Connection Code ?page=tracks sql injection

A vulnerability was found in SourceCodester Electric Billing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?page=tracks of the component Connection Code Handler. The manipulation of the argument code leads to sql injection...

6.5CVSS6.4AI score0.0062EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/08/30 2:31 p.m.•53 views

CVE-2024-8339 SourceCodester Electric Billing Management System Connection Code ?page=tracks sql injection

A vulnerability was found in SourceCodester Electric Billing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?page=tracks of the component Connection Code Handler. The manipulation of the argument code leads to sql injection...

6.5CVSS0.0062EPSS
SaveExploits1References5
NVD
NVD
•added 2024/08/30 2:15 p.m.•36 views

CVE-2024-8337

A vulnerability, which was classified as problematic, has been found in SourceCodester Contact Manager with Export to VCF 1.0. Affected by this issue is some unknown functionality of the file index.html. The manipulation of the argument contactname leads to cross site scripting. The attack may be...

5.4CVSS0.00447EPSS
SaveExploits1References5
NVD
NVD
•added 2024/08/30 2:15 p.m.•32 views

CVE-2024-8336

A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. Affected by this vulnerability is an unknown functionality of the file /php-music/classes/Master.php?f=deletemusic. The manipulation of the argument id leads to sql injection. The attack can be launched...

9.8CVSS0.00607EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2024/08/30 2:15 p.m.•22 views

CVE-2024-8336

A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. Affected by this vulnerability is an unknown functionality of the file /php-music/classes/Master.php?f=deletemusic. The manipulation of the argument id leads to sql injection. The attack can be launched...

9.8CVSS6.4AI score0.00607EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/08/30 1:31 p.m.•45 views

CVE-2024-8337 SourceCodester Contact Manager with Export to VCF index.html cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Contact Manager with Export to VCF 1.0. Affected by this issue is some unknown functionality of the file index.html. The manipulation of the argument contactname leads to cross site scripting. The attack may be...

5.3CVSS0.00447EPSS
SaveExploits1References5
CVE
CVE
•added 2024/08/30 1:31 p.m.•82 views

CVE-2024-8337

The CVE-2024-8337 entry affects SourceCodester Contact Manager with Export to VCF 1.0. The vulnerability is a Cross-Site Scripting in the index.html, caused by manipulating the contact_name argument. Affected functionality is unknown in detail across sources, but multiple documents state the issu...

5.4CVSS3.3AI score0.00447EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/08/30 1:31 p.m.•33 views

CVE-2024-8337 SourceCodester Contact Manager with Export to VCF index.html cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Contact Manager with Export to VCF 1.0. Affected by this issue is some unknown functionality of the file index.html. The manipulation of the argument contactname leads to cross site scripting. The attack may be...

5.3CVSS3.3AI score0.00447EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/08/30 1:31 p.m.•22 views

CVE-2024-8336 SourceCodester Music Gallery Site Master.php sql injection

A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. Affected by this vulnerability is an unknown functionality of the file /php-music/classes/Master.php?f=deletemusic. The manipulation of the argument id leads to sql injection. The attack can be launched...

6.5CVSS6.4AI score0.00607EPSS
SaveExploits1References5
CVE
CVE
•added 2024/08/30 1:31 p.m.•78 views

CVE-2024-8336

CVE-2024-8336 affects SourceCodester Music Gallery Site 1.0. The vulnerability is a SQL injection in an unknown function at /php-music/classes/Master.php?f=delete_music where the id parameter is manipulated, and the issue can be exploited remotely. The exploit has been disclosed publicly. Multipl...

9.8CVSS6.4AI score0.00607EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2024/08/30 1:31 p.m.•46 views

CVE-2024-8336 SourceCodester Music Gallery Site Master.php sql injection

A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. Affected by this vulnerability is an unknown functionality of the file /php-music/classes/Master.php?f=deletemusic. The manipulation of the argument id leads to sql injection. The attack can be launched...

6.5CVSS0.00607EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/08/30 12:00 a.m.•24 views

SourceCodester Petshop Management System Code Issues and Vulnerabilities

SourceCodester Petshop Management System is SourceCodester open source a pet store management system . A code issue exists in version 1.0 of the SourceCodester Petshop Management System, which is caused by an unrestricted file upload vulnerability in the avatar parameter of the...

9.8CVSS6.5AI score0.00721EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/30 12:00 a.m.•9 views

CVE-2024-8343: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Sentiment Based Movie Rating System 1.0. Affected is an unknown function of the file /classes/Users.php?f=saveclient of the component User Registration Handler. The manipulation of the argument email leads to sql...

9.8CVSS7AI score0.00652EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/08/30 12:00 a.m.•26 views

PT-2024-38955 · Sourcecodester · Sourcecodester Electric Billing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Electric Billing Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Electric Billing Management System. This issue affects the file /Actions.php?a=login, where the...

9.8CVSS6.9AI score0.00698EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/30 12:00 a.m.•12 views

CVE-2024-8337: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SourceCodester Contact Manager with Export to VCF 1.0. Affected by this issue is some unknown functionality of the file index.html. The manipulation of the argument contactname leads to cross site scripting. The attack may be...

5.4CVSS3.4AI score0.00447EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/30 12:00 a.m.•7 views

CVE-2024-8340: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Electric Billing Management System 1.0. This affects an unknown part of the file /Actions.php?a=login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS7AI score0.00698EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2024/08/30 12:00 a.m.•239 views

Water Billing Management System 1.0 Cross Site Request Forgery / File Upload

============================================================================================================================================= | Title : Water Billing Management System 1.0 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0....

7.4AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/30 12:00 a.m.•10 views

CVE-2024-8339: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Electric Billing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?page=tracks of the component Connection Code Handler. The manipulation of the argument code leads to sql injection...

9.8CVSS6.4AI score0.0062EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/08/30 12:00 a.m.•22 views

SourceCodester Electric Billing Management System SQL Injection Vulnerability

SourceCodester Electric Billing Management System is a SourceCodester open source electric billing management system. A SQL injection vulnerability exists in SourceCodester Electric Billing Management System version 1.0, which originates from an SQL injection vulnerability in the code parameter o...

9.8CVSS6.6AI score0.0062EPSS
SaveExploits1References7
Rows per page
Query Builder