Lucene search
K

7898 matches found

Cvelist
Cvelist
added 2024/11/10 9:31 a.m.15 views

CVE-2024-11054 SourceCodester Simple Music Cloud Community System ajax.php unrestricted upload

A vulnerability classified as critical was found in SourceCodester Simple Music Cloud Community System 1.0. This vulnerability affects unknown code of the file /music/ajax.php?action=signup. The manipulation of the argument pp leads to unrestricted upload. The attack can be initiated remotely. Th...

6.5CVSS0.00112EPSS
Exploits1References5
NVD
NVD
added 2024/11/08 6:15 p.m.12 views

CVE-2024-51032

A Cross-site Scripting XSS vulnerability in managerecipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field...

5.4CVSS0.01009EPSS
Exploits0References2
NVD
NVD
added 2024/11/08 5:15 a.m.7 views

CVE-2024-10990

A vulnerability classified as critical was found in SourceCodester Online Veterinary Appointment System 1.0. This vulnerability affects unknown code of the file /admin/services/viewservice.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The...

8.8CVSS0.00106EPSS
Exploits1References5
OSV
OSV
added 2024/11/08 5:15 a.m.2 views

CVE-2024-10990

A vulnerability classified as critical was found in SourceCodester Online Veterinary Appointment System 1.0. This vulnerability affects unknown code of the file /admin/services/viewservice.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The...

8.8CVSS5.8AI score0.00106EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/11/08 4:31 a.m.14 views

CVE-2024-10990 SourceCodester Online Veterinary Appointment System view_service.php sql injection

A vulnerability classified as critical was found in SourceCodester Online Veterinary Appointment System 1.0. This vulnerability affects unknown code of the file /admin/services/viewservice.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS0.00106EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/11/08 4:31 a.m.8 views

CVE-2024-10990 SourceCodester Online Veterinary Appointment System view_service.php sql injection

A vulnerability classified as critical was found in SourceCodester Online Veterinary Appointment System 1.0. This vulnerability affects unknown code of the file /admin/services/viewservice.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS6.9AI score0.00106EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/11/08 12:0 a.m.2 views

SourceCodester Online Veterinary Appointment System 注入漏洞

SourceCodester Online Veterinary Appointment System is a SourceCodester open source online veterinary appointment system. An injection vulnerability exists in SourceCodester Online Veterinary Appointment System version 1.0, which stems from the parameter id of the file...

8.8CVSS7.1AI score0.00106EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/11/08 12:0 a.m.13 views

CVE-2024-51032

A Cross-site Scripting XSS vulnerability in managerecipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field...

0.01009EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/11/08 12:0 a.m.15 views

CVE-2024-51032

A Cross-site Scripting XSS vulnerability in managerecipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field...

5.6AI score0.01009EPSS
Exploits0References2
NVD
NVD
added 2024/11/07 10:15 p.m.18 views

CVE-2024-50766

SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter...

9.8CVSS0.00507EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/11/07 12:0 a.m.2 views

PT-2024-34407 · Sourcecodester · Sourcecodester Survey Application System

Name of the Vulnerable Software and Affected Versions: SourceCodester Survey Application System version 1.0 Description: The issue is related to SQL Injection in the takeSurvey.php file via the id parameter. This allows for potential exploitation. Recommendations: For SourceCodester Survey...

9.8CVSS7.8AI score0.00507EPSS
Exploits1References7
NVD
NVD
added 2024/10/31 2:15 a.m.13 views

CVE-2024-10559

A vulnerability was found in SourceCodester Airport Booking Management System 1.0 and classified as critical. Affected by this issue is the function Details. The manipulation of the argument passport/name leads to buffer overflow. The attack needs to be approached locally. The exploit has been...

7.8CVSS0.00118EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/10/31 2:0 a.m.16 views

CVE-2024-10559 SourceCodester Airport Booking Management System details buffer overflow

A vulnerability was found in SourceCodester Airport Booking Management System 1.0 and classified as critical. Affected by this issue is the function Details. The manipulation of the argument passport/name leads to buffer overflow. The attack needs to be approached locally. The exploit has been...

5.3CVSS0.00118EPSS
Exploits1References5
CVE
CVE
added 2024/10/31 2:0 a.m.48 views

CVE-2024-10559

SourceCodester Airport Booking Management System 1.0 contains a buffer overflow in the Details/Passport Number Handler component. The vulnerability is exploitable with local access; the attacker can manipulate passport/name inputs to overflow buffers. The issue has been publicly disclosed and may...

7.8CVSS5.7AI score0.00118EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/31 2:0 a.m.7 views

CVE-2024-10559 SourceCodester Airport Booking Management System Passport Number details buffer overflow

A vulnerability was found in SourceCodester Airport Booking Management System 1.0 and classified as critical. Affected by this issue is the function details of the component Passport Number Handler. The manipulation leads to buffer overflow. The attack needs to be approached locally. The exploit...

5.3CVSS7AI score0.00118EPSS
Exploits1References5
NVD
NVD
added 2024/10/28 3:15 p.m.9 views

CVE-2024-10450

A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /kortexlite/control/editprofile.php of the component POST Parameter Handler. The manipulation of the argument id leads...

9.8CVSS0.00097EPSS
Exploits1References5
CVE
CVE
added 2024/10/28 3:0 p.m.57 views

CVE-2024-10450

CVE-2024-10450 affects SourceCodester Kortex Lite Advocate Office Management System v1.0. The flaw resides in the POST Parameter Handler, specifically in /kortex_lite/control/edit_profile.php, where manipulating the id parameter allows SQL injection. Attacks can be initiated remotely and exploits...

9.8CVSS7.1AI score0.00097EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2024/10/27 6:15 p.m.11 views

CVE-2024-10422

A vulnerability, which was classified as critical, has been found in SourceCodester Attendance and Payroll System 1.0. This issue affects some unknown processing of the file /admin/overtimeadd.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. T...

9.8CVSS0.00096EPSS
Exploits0References5
Cvelist
Cvelist
added 2024/10/27 5:31 p.m.14 views

CVE-2024-10422 SourceCodester Attendance and Payroll System overtime_add.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Attendance and Payroll System 1.0. This issue affects some unknown processing of the file /admin/overtimeadd.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. T...

6.5CVSS0.00096EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2024/10/27 5:31 p.m.9 views

CVE-2024-10422 SourceCodester Attendance and Payroll System overtime_add.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Attendance and Payroll System 1.0. This issue affects some unknown processing of the file /admin/overtimeadd.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. T...

6.5CVSS6.8AI score0.00096EPSS
Exploits0References5
Rows per page
Query Builder