Lucene search
K

7898 matches found

Vulnrichment
Vulnrichment
added 2024/10/24 12:0 a.m.16 views

CVE-2024-48454

An issue in SourceCodester Purchase Order Management System v1.0 allows a remote attacker to execute arbitrary code via the /admin?page=user component...

7.9AI score0.02659EPSS
Exploits0References3
NVD
NVD
added 2024/10/20 2:15 a.m.14 views

CVE-2024-10163

A vulnerability was found in SourceCodester Sentiment Based Movie Rating System 1.0. It has been classified as critical. Affected is an unknown function of the file /msrps/moviedetails.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. T...

9.8CVSS0.00097EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/10/20 1:31 a.m.19 views

CVE-2024-10163 SourceCodester Sentiment Based Movie Rating System movie_details.php sql injection

A vulnerability was found in SourceCodester Sentiment Based Movie Rating System 1.0. It has been classified as critical. Affected is an unknown function of the file /msrps/moviedetails.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. T...

6.5CVSS0.00097EPSS
Exploits1References5
CVE
CVE
added 2024/10/20 1:31 a.m.46 views

CVE-2024-10163

CVE-2024-10163 affects SourceCodester Sentiment Based Movie Rating System 1.0. Affected component: the function in /msrps/movie_details.php where the id parameter is manipulated, leading to SQL injection. Attack can be launched remotely and the exploit has been disclosed publicly. Connected sourc...

9.8CVSS7AI score0.00097EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/20 1:31 a.m.8 views

CVE-2024-10163 SourceCodester Sentiment Based Movie Rating System movie_details.php sql injection

A vulnerability was found in SourceCodester Sentiment Based Movie Rating System 1.0. It has been classified as critical. Affected is an unknown function of the file /msrps/moviedetails.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. T...

6.5CVSS7.4AI score0.00097EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/10/20 12:0 a.m.3 views

SourceCodester Sentiment Based Movie Rating System SQL注入漏洞

SourceCodester Sentiment Based Movie Rating System is an open source movie rating system from SourceCodester. A SQL injection vulnerability exists in SourceCodester Sentiment Based Movie Rating System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql...

9.8CVSS7.3AI score0.00097EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2024/10/19 12:0 a.m.3 views

PT-2024-16076 · Unknown · Sourcecodester Sentiment Based Movie Rating System

Name of the Vulnerable Software and Affected Versions: SourceCodester Sentiment Based Movie Rating System version 1.0 Description: A critical issue has been found, allowing for SQL injection through the manipulation of the id argument in an unknown function of the file /msrps/movie details.php...

9.8CVSS7.1AI score0.00097EPSS
Exploits1References10
OSV
OSV
added 2024/10/15 11:15 a.m.2 views

CVE-2024-9975

A vulnerability was found in SourceCodester Drag and Drop Image Upload 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /upload.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclos...

8.8CVSS5.4AI score0.00265EPSS
Exploits1References5
NVD
NVD
added 2024/10/15 11:15 a.m.19 views

CVE-2024-9975

A vulnerability was found in SourceCodester Drag and Drop Image Upload 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /upload.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclos...

8.8CVSS0.00265EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/10/15 11:0 a.m.16 views

CVE-2024-9975 SourceCodester Drag and Drop Image Upload upload.php unrestricted upload

A vulnerability was found in SourceCodester Drag and Drop Image Upload 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /upload.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclos...

6.5CVSS0.00265EPSS
Exploits1References5
CVE
CVE
added 2024/10/15 11:0 a.m.47 views

CVE-2024-9975

CVE-2024-9975 concerns SourceCodester Drag and Drop Image Upload 1.0. The issue is an unrestricted file upload in the vulnerable code path, specifically the /upload.php functionality. Descriptions from multiple sources state the vulnerability can be triggered remotely and that the upload manipula...

8.8CVSS6.7AI score0.00265EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/15 11:0 a.m.10 views

CVE-2024-9975 SourceCodester Drag and Drop Image Upload upload.php unrestricted upload

A vulnerability was found in SourceCodester Drag and Drop Image Upload 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /upload.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclos...

6.5CVSS6.4AI score0.00265EPSS
Exploits1References5
NVD
NVD
added 2024/10/15 10:15 a.m.8 views

CVE-2024-9973

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=reports of the component Report Viewing Page. The manipulation of the argument date leads to sql injection. It is possible to launch th...

9.8CVSS0.00194EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/10/15 2:0 a.m.11 views

CVE-2024-9952 SourceCodester Online Eyewear Shop Contact Information Page contact_info cross site scripting

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/?page=systeminfo/contactinfo of the component Contact Information Page. The manipulation of the argument Address leads to cross site...

5.1CVSS3.5AI score0.00211EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/10/13 4:0 a.m.20 views

CVE-2024-9906 SourceCodester Online Eyewear Shop cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /admin/?page=inventory/viewinventory&id=2. The manipulation of the argument Code leads to cross site scripting. It is possible to launch the attac...

5.3CVSS0.00143EPSS
Exploits1References5
NVD
NVD
added 2024/10/10 11:15 p.m.13 views

CVE-2024-9818

A vulnerability classified as critical has been found in SourceCodester Online Veterinary Appointment System 1.0. Affected is an unknown function of the file /admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

9.8CVSS0.00097EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/10/10 10:31 p.m.16 views

CVE-2024-9818 SourceCodester Online Veterinary Appointment System manage_category.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Veterinary Appointment System 1.0. Affected is an unknown function of the file /admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

7.5CVSS0.00097EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/10/10 10:31 p.m.9 views

CVE-2024-9818 SourceCodester Online Veterinary Appointment System manage_category.php sql injection

A vulnerability classified as critical has been found in SourceCodester Online Veterinary Appointment System 1.0. Affected is an unknown function of the file /admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

7.5CVSS7.6AI score0.00097EPSS
Exploits1References5
NVD
NVD
added 2024/10/10 8:15 p.m.18 views

CVE-2024-9809

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is the function deleteproduct of the file /classes/Master.php?f=deleteproduct. The manipulation of the argument id leads to sql injection. The attack can be launch...

6.5CVSS0.00086EPSS
Exploits1References5
OSV
OSV
added 2024/10/10 8:15 p.m.2 views

CVE-2024-9810

A vulnerability was found in SourceCodester Record Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file sort2user.php. The manipulation of the argument qualification leads to cross site scripting. The attack may be launched...

6.1CVSS3.8AI score0.00131EPSS
Exploits1References5
Rows per page
Query Builder