Lucene search
K

7898 matches found

Positive Technologies
Positive Technologies
added 2024/06/20 12:0 a.m.2 views

PT-2024-37455 · Sourcecodester · Sourcecodester Food Ordering Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Food Ordering Management System versions up to 1.0 Description: A critical issue has been found in the SourceCodester Food Ordering Management System, affecting the file login.php of the Login Panel. The manipulation of the...

9.8CVSS8.2AI score0.00682EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2024/06/20 12:0 a.m.3 views

PT-2024-37459 · Sourcecodester · Sourcecodester Food Ordering Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Food Ordering Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Food Ordering Management System. The issue affects an unknown functionality of the file user-router.php. The...

8.8CVSS8.4AI score0.00532EPSS
Exploits1References8
OSV
OSV
added 2024/06/17 10:15 p.m.2 views

CVE-2024-6067

A vulnerability classified as critical was found in SourceCodester Music Class Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file /mces/?p=class/viewclass. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

9.8CVSS5.7AI score0.00544EPSS
Exploits1References4
NVD
NVD
added 2024/06/17 10:15 p.m.14 views

CVE-2024-6067

A vulnerability classified as critical was found in SourceCodester Music Class Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file /mces/?p=class/viewclass. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

9.8CVSS0.00544EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/06/17 9:31 p.m.12 views

CVE-2024-6067 SourceCodester Music Class Enrollment System sql injection

A vulnerability classified as critical was found in SourceCodester Music Class Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file /mces/?p=class/viewclass. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

6.5CVSS7.7AI score0.00544EPSS
Exploits1References4
NVD
NVD
added 2024/06/17 9:15 p.m.16 views

CVE-2024-6066

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file paymentreport.php. The manipulation of the argument monthof leads to sql injection. It is possible to launch the attack remotely. The exploi...

9.8CVSS0.00544EPSS
Exploits1References4
OSV
OSV
added 2024/06/17 9:15 p.m.1 views

CVE-2024-6066

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file paymentreport.php. The manipulation of the argument monthof leads to sql injection. It is possible to launch the attack remotely. The exploi...

9.8CVSS6.5AI score
Exploits0References4
NVD
NVD
added 2024/06/17 9:15 p.m.29 views

CVE-2024-34833

Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the "savesettings" page. An unauthenticated attacker can leverage this functionality to upload a malicious PHP file instead. Successful exploitation of this vulnerability results in the ability...

9.8CVSS0.01923EPSS
Exploits4References2
OSV
OSV
added 2024/06/17 9:15 p.m.3 views

CVE-2024-34833

Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the "savesettings" page. An unauthenticated attacker can leverage this functionality to upload a malicious PHP file instead. Successful exploitation of this vulnerability results in the ability...

9.8CVSS6.1AI score0.01923EPSS
Exploits4References2
Cvelist
Cvelist
added 2024/06/17 9:0 p.m.14 views

CVE-2024-6066 SourceCodester Best House Rental Management System payment_report.php sql injection

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file paymentreport.php. The manipulation of the argument monthof leads to sql injection. It is possible to launch the attack remotely. The exploi...

6.5CVSS0.00544EPSS
Exploits1References4
CVE
CVE
added 2024/06/17 9:0 p.m.49 views

CVE-2024-6066

CVE-2024-6066 affects SourceCodester Best House Rental Management System 1.0, specifically the payment_report.php file where the argument month_of can be manipulated to induce SQL injection. The vulnerability is exploitable remotely and has been disclosed publicly. The connected documents confirm...

9.8CVSS7.1AI score0.00544EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2024/06/17 1:15 a.m.13 views

CVE-2024-6043

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file adminclass.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploi...

9.8CVSS0.01926EPSS
Exploits2References4
CVE
CVE
added 2024/06/17 12:0 a.m.52 views

CVE-2024-6043

CVE-2024-6043 affects SourceCodester Best House Rental Management System 1.0, specifically the login function in admin_class.php. The vulnerability is a SQL injection via the username parameter, enabling remote exploitation and with public disclosure of the exploit. Connected sources corroborate ...

9.8CVSS7.7AI score0.01926EPSS
Exploits2References4Affected Software1
Cvelist
Cvelist
added 2024/06/17 12:0 a.m.24 views

CVE-2024-6043 SourceCodester Best House Rental Management System admin_class.php login sql injection

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file adminclass.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploi...

7.5CVSS0.01926EPSS
Exploits2References4
Vulnrichment
Vulnrichment
added 2024/06/17 12:0 a.m.17 views

CVE-2024-6043 SourceCodester Best House Rental Management System admin_class.php login sql injection

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file adminclass.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploi...

7.5CVSS7.5AI score0.01926EPSS
Exploits2References4
Packet Storm
Packet Storm
added 2024/06/17 12:0 a.m.556 views

Payroll Management System 1.0 Remote Code Execution

Exploit Title: Payroll Management System v1.0 RCE Unauthenticated Google Dork: intitle:"Employee's Payroll Management System" Date: 16/06/2024 Exploit Author: ShellUnease Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

7.4AI score0.01923EPSS
Exploits4
OSV
OSV
added 2024/06/14 2:15 a.m.1 views

CVE-2024-5985

A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

8.8CVSS5.7AI score0.00561EPSS
Exploits1References4
NVD
NVD
added 2024/06/14 2:15 a.m.24 views

CVE-2024-5985

A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

8.8CVSS0.00561EPSS
Exploits1References4
CVE
CVE
added 2024/06/14 2:0 a.m.51 views

CVE-2024-5985

CVE-2024-5985 affects SourceCodester Best Online News Portal 1.0, with the vulnerability located in /admin/index.php where altering the username parameter triggers SQL injection. Exploitation is remote and an exploit has been disclosed. Root cause: unsanitized/parameterized input enabling SQL inj...

8.8CVSS7.1AI score0.00561EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/14 2:0 a.m.14 views

CVE-2024-5985 SourceCodester Best Online News Portal index.php sql injection

A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS9AI score0.00561EPSS
Exploits1References4
Rows per page
Query Builder