7898 matches found
Doctor's Appointment System 1.0 SQL Injection
Exploit Title: SQLi - Doctor's Appointment System v1.0 Google Dork: N/A Date: 7/13/2022 Exploit Author: Abdullah Zaid - @aznull Vendor Homepage: https://www.sourcecodester.com/hashenudara/simple-doctors-appointment-project.html Software Link:...
CVE-2022-3013
A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the file /loginVaLidation.php. The manipulation of the argument login leads to sql injection. It is possible to initiate the attack remotely. The associated...
Cross site scripting
A vulnerability classified as problematic was found in SourceCodester Simple Task Managing System. This vulnerability affects unknown code. The manipulation of the argument studentadd leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is...
CVE-2022-3014
The CVE-2022-3014 entry concerns a cross-site scripting flaw in SourceCodester Simple Task Managing System caused by manipulating the student_add parameter. Multiple connected sources confirm this vulnerability stems from unknown code paths and can be exploited remotely, impacting the affected sy...
CVE-2022-3014 SourceCodester Simple Task Managing System cross site scripting
A vulnerability classified as problematic was found in SourceCodester Simple Task Managing System. This vulnerability affects unknown code. The manipulation of the argument studentadd leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is...
CVE-2022-3013 SourceCodester Simple Task Managing System loginVaLidation.php sql injection
A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the file /loginVaLidation.php. The manipulation of the argument login leads to sql injection. It is possible to initiate the attack remotely. The associated...
CVE-2022-3013
CVE-2022-3013 affects SourceCodester Simple Task Managing System. Affected component: unknown area of /loginVaLidation.php. Root cause: manipulation of the parameter login leads to SQL injection , with remote exploitable access. Multiple connected reports confirm the issue and describe exploitati...
CVE-2022-2957
CVE-2022-2957 affects SourceCodester Simple and Nice Shopping Cart Script. The vulnerability is an SQL injection in an unknown functionality of the file /mkshop/Men/profile.php triggered by manipulating the mem_id parameter. Documents indicate the attack could be launched remotely and that an exp...
PT-2022-19703 · Sourcecodester · Sourcecodester Simple/Nice Shopping Cart Script
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple and Nice Shopping Cart Script affected versions not specified Description: A critical vulnerability was found in the SourceCodester Simple and Nice Shopping Cart Script, affecting an unknown functionality of the file...
Sql injection
A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument useremail leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to t...
CVE-2022-2842
The CVE-2022-2842 entry concerns SourceCodester Gym Management System. The vulnerability lies in the login.php component where manipulating the user_email parameter triggers a SQL injection, allowing remote access as described in multiple sources. The issue is deemed critical (per NVD) with poten...
CVE-2022-2909 SourceCodester Simple and Nice Shopping Cart Script profile.php unrestricted upload
A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mkshop/Men/profile.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. T...
CVE-2022-2909
CVE-2022-2909 affects SourceCodester Simple and Nice Shopping Cart Script, via unrestricted file upload in /mkshop/Men/profile.php. A remote attacker can upload arbitrary files, leading to high impact on confidentiality, integrity, and availability (per CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A...
Sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Student Management System. Affected is an unknown function of the file index.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...
CVE-2022-2876
The CVE-2022-2876 entry concerns SourceCodester Student Management System, where an SQL injection is possible via manipulating the id parameter in index.php. The vulnerability is exploitable remotely and was disclosed publicly; affected is an unknown function in index.php. Connected sources corro...
PT-2022-19213 · Sourcecodester · Sourcecodester Student Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Student Management System affected versions not specified Description: A critical issue was found in the SourceCodester Student Management System, affecting an unknown function of the file index.php. The manipulation of the id...
CVE-2022-2847 SourceCodester Guest Management System front.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Guest Management System. This issue affects some unknown processing of the file /guestmanagement/front.php. The manipulation of the argument rid leads to sql injection. The attack may be initiated remotely. The...
CVE-2022-2847
CVE-2022-2847 affects SourceCodester Guest Management System. The vulnerability is a SQL injection in the file /guestmanagement/front.php, caused by manipulating the rid parameter. This could be exploited remotely; multiple sources note that the exploit has been disclosed publicly (VDB-206489). I...
PT-2022-19047 · Sourcecodester · Sourcecodester Guest Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Guest Management System affected versions not specified Description: A critical issue has been found in the SourceCodester Guest Management System, affecting the processing of the file /guestmanagement/front.php. The manipulati...
CVE-2022-2813
A vulnerability, which was classified as problematic, was found in SourceCodester Guest Management System. Affected is an unknown function. The manipulation leads to cleartext storage of passwords in the database. The identifier of this vulnerability is VDB-206400...