Lucene search
+L

20154 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/08 12:00 a.m.•25 views

CVE-2024-51032: Improper Neutralization of Input During Web Page Generation

A Cross-site Scripting XSS vulnerability in managerecipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field...

5.4CVSS6AI score0.00441EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/08 12:00 a.m.•43 views

CVE-2024-51031

A Cross-site Scripting XSS vulnerability in manageaccount.php in Sourcecodester Cab Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "First Name," "Middle Name," and "Last Name" fields...

0.00441EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/08 12:00 a.m.•84 views

CVE-2024-51032

CVE-2024-51032 affects Sourcecodester Toll Tax Management System 1.0. The vulnerability is a Cross-site Scripting (XSS) in the file manage_recipient.php, exploitable by remote authenticated users via the owner input field. According to the sources, the impact is XSS with potential script injectio...

5.4CVSS6AI score0.00441EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2024/11/08 12:00 a.m.•79 views

CVE-2024-51031

CVE-2024-51031 affects Sourcecodester Cab Management System 1.0. A cross-site scripting (XSS) vulnerability exists in manage_account.php allowing remote authenticated users to inject arbitrary scripts via the First Name, Middle Name, and Last Name fields. The issue is documented across multiple f...

5.4CVSS6AI score0.00441EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2024/11/08 12:00 a.m.•23 views

SourceCodester Online Veterinary Appointment System Injection Vulnerability

SourceCodester Online Veterinary Appointment System is a SourceCodester open source online veterinary appointment system. An injection vulnerability exists in SourceCodester Online Veterinary Appointment System version 1.0, which stems from the parameter id of the file...

8.8CVSS6.5AI score0.00545EPSS
SaveExploits1References5
CVE
CVE
•added 2024/11/08 12:00 a.m.•84 views

CVE-2024-51030

Sourcecodester Cab Management System 1.0 has a SQL injection in manage_client.php and view_cab.php that can be exploited via the id parameter to execute arbitrary SQL. Affected scripts: manage_client.php, view_cab.php. Root cause: unsanitized id parameter enabling SQL injection with high confiden...

6.5CVSS6.6AI score0.00686EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/08 12:00 a.m.•27 views

CVE-2024-51032

A Cross-site Scripting XSS vulnerability in managerecipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field...

6AI score0.00441EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/08 12:00 a.m.•49 views

CVE-2024-51032

A Cross-site Scripting XSS vulnerability in managerecipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field...

0.00441EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/11/07 10:15 p.m.•20 views

CVE-2024-50766

SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter...

9.8CVSS5.9AI score0.00538EPSS
SaveExploits1References1
NVD
NVD
•added 2024/11/07 10:15 p.m.•47 views

CVE-2024-50766

SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter...

9.8CVSS0.00538EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/07 12:00 a.m.•9 views

CVE-2024-50766: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter...

9.8CVSS5.9AI score0.00538EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/11/07 12:00 a.m.•38 views

CVE-2024-50766

SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter...

0.00538EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/07 12:00 a.m.•20 views

PT-2024-34407 · Sourcecodester · Sourcecodester Survey Application System

Name of the Vulnerable Software and Affected Versions: SourceCodester Survey Application System version 1.0 Description: The issue is related to SQL Injection in the takeSurvey.php file via the id parameter. This allows for potential exploitation. Recommendations: For SourceCodester Survey...

9.8CVSS5.9AI score0.00538EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2024/11/07 12:00 a.m.•23 views

SourceCodester Survey Application System security vulnerabilities

SourceCodester Survey Application System is an open source survey application system from SourceCodester. A security vulnerability exists in SourceCodester Survey Application System version 1.0, which originates from an SQL injection vulnerability in the id parameter of the takeSurvey.php page...

9.8CVSS5.8AI score0.00538EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/11/07 12:00 a.m.•27 views

CVE-2024-50766

SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter...

5.9AI score0.00538EPSS
SaveExploits1References1
CVE
CVE
•added 2024/11/07 12:00 a.m.•74 views

CVE-2024-50766

SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection due to improper neutralization of special elements in the id parameter of the takeSurvey.php page. An attacker can exploit this vulnerability to interact with the underlying database. To mitigate this risk, it is recommen...

9.8CVSS5.9AI score0.00538EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/11/06 12:00 a.m.•19 views

PT-2024-34497 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Cab Management System version 1.0 Description: A Cross-site Scripting XSS issue in manage account.php allows remote authenticated users to inject arbitrary web scripts via the First Name, Middle Name, and Last Name fields...

5.4CVSS6AI score0.00441EPSS
SaveExploits0References7
NVD
NVD
•added 2024/10/31 2:15 a.m.•31 views

CVE-2024-10559

A vulnerability was found in SourceCodester Airport Booking Management System 1.0 and classified as critical. Affected by this issue is the function Details. The manipulation of the argument passport/name leads to buffer overflow. The attack needs to be approached locally. The exploit has been...

7.8CVSS0.00388EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/10/31 2:00 a.m.•37 views

CVE-2024-10559 SourceCodester Airport Booking Management System details buffer overflow

A vulnerability was found in SourceCodester Airport Booking Management System 1.0 and classified as critical. Affected by this issue is the function Details. The manipulation of the argument passport/name leads to buffer overflow. The attack needs to be approached locally. The exploit has been...

5.3CVSS0.00388EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/10/31 2:00 a.m.•22 views

CVE-2024-10559 SourceCodester Airport Booking Management System Passport Number details buffer overflow

A vulnerability was found in SourceCodester Airport Booking Management System 1.0 and classified as critical. Affected by this issue is the function details of the component Passport Number Handler. The manipulation leads to buffer overflow. The attack needs to be approached locally. The exploit...

5.3CVSS5.5AI score0.00388EPSS
SaveExploits1References5
Rows per page
Query Builder