Lucene search
K

16049 matches found

CNNVD
CNNVD
added 2024/09/18 12:0 a.m.1 views

Sourcecodester Best House Rental Management System 安全漏洞

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester, Inc. A security vulnerability exists in Sourcecodester Best House Rental Management System version 1.0, which originates from an arbitrary file upload vulnerability in the savesettings...

9.8CVSS7AI score0.221EPSS
Exploits1References2
NVD
NVD
added 2024/09/17 8:15 p.m.5 views

CVE-2024-8951

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file managefee.php. The manipulation of the argument toview leads to cross site scripting. The attack can be launched remotely. Th...

6.1CVSS0.00128EPSS
Exploits1References5
CVE
CVE
added 2024/09/17 8:0 p.m.36 views

CVE-2024-8951

The CVE-2024-8951 entry covers a cross-site scripting vulnerability in SourceCodester Resort Reservation System 1.0, arising from manipulation of the toview argument in the manage_fee.php file. The vulnerability is described as exploitable remotely, with public disclosure of the exploit. Connecte...

6.1CVSS4.1AI score0.00128EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/17 8:0 p.m.9 views

CVE-2024-8951 SourceCodester Resort Reservation System manage_fee.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file managefee.php. The manipulation of the argument toview leads to cross site scripting. The attack can be launched remotely. Th...

5.3CVSS6.2AI score0.00128EPSS
Exploits1References5
NVD
NVD
added 2024/09/17 7:15 p.m.9 views

CVE-2024-8949

A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. The manipulation of the argument cartid/id leads to improper ownership management. It is possible to...

8.8CVSS0.01173EPSS
Exploits0References5
OSV
OSV
added 2024/09/17 7:15 p.m.2 views

CVE-2024-8949

A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. The manipulation of the argument cartid/id leads to improper ownership management. It is possible to...

8.8CVSS5.5AI score0.01173EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2024/09/17 7:0 p.m.14 views

CVE-2024-8949 SourceCodester Online Eyewear Shop Cart Content Master.php improper ownership management

A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. The manipulation of the argument cartid/id leads to improper ownership management. It is possible to...

6.5CVSS7AI score0.01173EPSS
Exploits0References5
Cvelist
Cvelist
added 2024/09/17 7:0 p.m.18 views

CVE-2024-8949 SourceCodester Online Eyewear Shop Cart Content Master.php improper ownership management

A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. The manipulation of the argument cartid/id leads to improper ownership management. It is possible to...

6.5CVSS0.01173EPSS
Exploits0References5
CVE
CVE
added 2024/09/17 7:0 p.m.47 views

CVE-2024-8949

Affected software: SourceCodester Online Eyewear Shop 1.0. Vulnerable component/file: Cart Content Handler, specifically the unknown part of /classes/Master.php. Root cause: manipulation of the argument cart_id/id leading to improper ownership management. Impact: remote initiation possible; explo...

8.8CVSS6.8AI score0.01173EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2024/09/12 4:15 a.m.10 views

CVE-2024-8711

A vulnerability, which was classified as problematic, has been found in SourceCodester Food Ordering Management System 1.0. Affected by this issue is some unknown functionality of the file /includes/. The manipulation leads to exposure of information through directory listing. The attack may be...

7.5CVSS0.00193EPSS
Exploits1References5
OSV
OSV
added 2024/09/12 4:15 a.m.1 views

CVE-2024-8711

A vulnerability, which was classified as problematic, has been found in SourceCodester Food Ordering Management System 1.0. Affected by this issue is some unknown functionality of the file /includes/. The manipulation leads to exposure of information through directory listing. The attack may be...

7.5CVSS5.1AI score0.00193EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/09/12 3:31 a.m.8 views

CVE-2024-8711 SourceCodester Food Ordering Management System includes exposure of information through directory listing

A vulnerability, which was classified as problematic, has been found in SourceCodester Food Ordering Management System 1.0. Affected by this issue is some unknown functionality of the file /includes/. The manipulation leads to exposure of information through directory listing. The attack may be...

6.9CVSS6.6AI score0.00193EPSS
Exploits1References5
CVE
CVE
added 2024/09/12 3:31 a.m.43 views

CVE-2024-8711

CVE-2024-8711 affects SourceCodester Food Ordering Management System 1.0. The vulnerable component is the /includes/ directory, where an unknown functionality allows listing that exposes information. Attacks can be conducted remotely, and public exploits exist. Impact is information disclosure (c...

7.5CVSS5.6AI score0.00193EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2024/09/12 3:31 a.m.16 views

CVE-2024-8711 SourceCodester Food Ordering Management System includes exposure of information through directory listing

A vulnerability, which was classified as problematic, has been found in SourceCodester Food Ordering Management System 1.0. Affected by this issue is some unknown functionality of the file /includes/. The manipulation leads to exposure of information through directory listing. The attack may be...

6.9CVSS0.00193EPSS
Exploits1References5
NVD
NVD
added 2024/09/12 3:15 a.m.7 views

CVE-2024-8709

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is the function deleteuser/saveuser of the file /adminclass.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

8.8CVSS0.00249EPSS
Exploits1References5
CVE
CVE
added 2024/09/12 2:31 a.m.47 views

CVE-2024-8709

CVE-2024-8709 affects SourceCodester Best House Rental Management System 1.0. The vulnerable component is the delete_user/save_user function in /admin_class.php, where manipulating the id parameter causes SQL injection. This allows remote exploitation; public exploit info exists. Remediation guid...

8.8CVSS7.1AI score0.00249EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/12 2:31 a.m.9 views

CVE-2024-8709 SourceCodester Best House Rental Management System admin_class.php save_user sql injection

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is the function deleteuser/saveuser of the file /adminclass.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

6.5CVSS7.4AI score0.00249EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/09/12 2:31 a.m.16 views

CVE-2024-8709 SourceCodester Best House Rental Management System admin_class.php save_user sql injection

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is the function deleteuser/saveuser of the file /adminclass.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

6.5CVSS0.00249EPSS
Exploits1References5
NVD
NVD
added 2024/09/12 2:15 a.m.11 views

CVE-2024-8708

A vulnerability was found in SourceCodester Best House Rental Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file categories.php. The manipulation leads to cross site scripting. The attack may be initiated remotely...

6.1CVSS0.0018EPSS
Exploits0References4
CVE
CVE
added 2024/09/12 2:0 a.m.49 views

CVE-2024-8708

CVE-2024-8708 affects SourceCodester Best House Rental Management System 1.0. The flaw is in categories.php processing that enables cross-site scripting and can be triggered remotely. PT-2024-39188 confirms the affected version and recommends patching the 1.0 release, validating inputs, and restr...

6.1CVSS4.1AI score0.0018EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder