Lucene search
+L

16565 matches found

Vulnrichment
Vulnrichment
added 2024/06/12 3:00 p.m.14 views

CVE-2024-5895 SourceCodester Employee and Visitor Gate Pass Logging System delete_users sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. This issue affects the function deleteusers of the file /classes/Users.php?f=delete. The manipulation of the argument id leads to sql injection. The attack may be...

6.5CVSS9.8AI score0.00612EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/06/12 3:00 p.m.32 views

CVE-2024-5895 SourceCodester Employee and Visitor Gate Pass Logging System delete_users sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. This issue affects the function deleteusers of the file /classes/Users.php?f=delete. The manipulation of the argument id leads to sql injection. The attack may be...

6.5CVSS0.00612EPSS
SaveExploits1References4
CVE
CVE
added 2024/06/12 3:00 p.m.59 views

CVE-2024-5895

CVE-2024-5895 affects SourceCodester Employee and Visitor Gate Pass Logging System 1.0. The vulnerability is a SQL injection in the delete_users function (file /classes/Users.php?f=delete) triggered by manipulating the id argument. Impact is described as high for confidentiality, integrity, and a...

9.8CVSS7.1AI score0.00612EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/12 3:00 p.m.19 views

CVE-2024-5894 SourceCodester Online Eyewear Shop manage_product.php sql injection

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file manageproduct.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to th...

7.5CVSS7.6AI score0.00646EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/06/12 3:00 p.m.34 views

CVE-2024-5894 SourceCodester Online Eyewear Shop manage_product.php sql injection

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file manageproduct.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to th...

7.5CVSS0.00646EPSS
SaveExploits1References4
CVE
CVE
added 2024/06/12 3:00 p.m.59 views

CVE-2024-5894

CVE-2024-5894 affects SourceCodester Online Eyewear Shop 1.0, specifically the manage_product.php file. The vulnerability arises from manipulation of the id parameter, leading to SQL injection and enabling remote exploitation. Documents consistently describe a critical/high-severity issue with po...

9.8CVSS7.8AI score0.00646EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2024/06/12 2:31 p.m.31 views

CVE-2024-5893 SourceCodester Cab Management System sql injection

A vulnerability classified as critical has been found in SourceCodester Cab Management System 1.0. This affects an unknown part of the file /cms/classes/Users.php?f=deleteclient. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploi...

6.5CVSS0.00544EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/06/12 2:31 p.m.14 views

CVE-2024-5893 SourceCodester Cab Management System sql injection

A vulnerability classified as critical has been found in SourceCodester Cab Management System 1.0. This affects an unknown part of the file /cms/classes/Users.php?f=deleteclient. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploi...

6.5CVSS7.4AI score0.00544EPSS
SaveExploits1References4
CVE
CVE
added 2024/06/12 2:31 p.m.64 views

CVE-2024-5893

SourceCodester Cab Management System 1.0 is affected by a SQL injection in the /cms/classes/Users.php?f=delete_client endpoint, caused by manipulation of the id parameter in the delete_client function. Attacks can be initiated remotely, and public exploits have been disclosed. The vulnerability i...

9.8CVSS7.1AI score0.00544EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/06/12 12:00 a.m.18 views

PT-2024-37231 · Sourcecodester · Employee/Visitor Gate Pass Logging System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description: A critical issue was found in the save users function of the /classes/Users.php file, specifically in the id argument, which leads to sql injection. This...

9.8CVSS7.6AI score0.00682EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2024/06/12 12:00 a.m.9 views

PT-2024-37228 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Cab Management System version 1.0 Description: A critical issue has been discovered, affecting the /cms/classes/Users.php file, specifically when the id argument is manipulated, leading to SQL injection. This can be initiated...

9.8CVSS7AI score0.00544EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2024/06/12 12:00 a.m.7 views

PT-2024-37232 · Unknown · Sourcecodester Employee/Visitor Gate Pass Logging System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description: A vulnerability has been found in the system, classified as problematic. It affects an unknown functionality of the file /classes/Master.php?f=log visitor...

6.9CVSS4.7AI score0.00617EPSS
SaveExploits1References6
OSV
OSV
added 2024/06/10 8:15 p.m.11 views

CVE-2024-32167

Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Arbitrary file deletion vulnerability as the backend settings have the function of deleting pictures to delete any files...

9.1CVSS5.8AI score0.0067EPSS
SaveExploits1References1
NVD
NVD
added 2024/06/10 8:15 p.m.37 views

CVE-2024-32167

Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Arbitrary file deletion vulnerability as the backend settings have the function of deleting pictures to delete any files...

9.1CVSS0.0067EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/06/10 12:00 a.m.38 views

CVE-2024-32167

Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Arbitrary file deletion vulnerability as the backend settings have the function of deleting pictures to delete any files...

0.0067EPSS
SaveExploits1References1
CVE
CVE
added 2024/06/10 12:00 a.m.72 views

CVE-2024-32167

CVE-2024-32167 involves the Sourcecodester Online Medicine Ordering System 1.0. The vulnerability is an Arbitrary file deletion flaw caused by a backend function intended for deleting pictures, which can be abused to delete arbitrary files. Reported impact aligns with high integrity and availabil...

9.1CVSS6.9AI score0.0067EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/10 12:00 a.m.17 views

CVE-2024-32167

Sourcecodester Online Medicine Ordering System 1.0 is vulnerable to Arbitrary file deletion vulnerability as the backend settings have the function of deleting pictures to delete any files...

6.8AI score0.0067EPSS
SaveExploits1References1
NVD
NVD
added 2024/06/09 8:15 a.m.31 views

CVE-2024-5775

A vulnerability was found in SourceCodester Vehicle Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file updatebill.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has...

8.8CVSS0.00604EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/06/09 7:31 a.m.12 views

CVE-2024-5775 SourceCodester Vehicle Management System updatebill.php sql injection

A vulnerability was found in SourceCodester Vehicle Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file updatebill.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has...

7.5CVSS7.3AI score0.00604EPSS
SaveExploits1References4
CVE
CVE
added 2024/06/09 7:31 a.m.61 views

CVE-2024-5775

CVE-2024-5775 affects SourceCodester Vehicle Management System 1.0, exploiting updatebill.php via the vulnerable id parameter to trigger SQL injection. The issue can be exploited remotely and, according to multiple sources, exploit/public disclosure exists (VDB-267458). Affected component is the ...

8.8CVSS7AI score0.00604EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder