Lucene search
+L

20154 matches found

Cvelist
Cvelist
•added 2024/10/15 9:31 a.m.•54 views

CVE-2024-9973 SourceCodester Online Eyewear Shop Report Viewing Page page sql injection

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=reports of the component Report Viewing Page. The manipulation of the argument date leads to sql injection. It is possible to launch th...

6.5CVSS0.00515EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/10/15 9:31 a.m.•16 views

CVE-2024-9973 SourceCodester Online Eyewear Shop Report Viewing Page page sql injection

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=reports of the component Report Viewing Page. The manipulation of the argument date leads to sql injection. It is possible to launch th...

6.5CVSS6.3AI score0.00515EPSS
SaveExploits1References5
CVE
CVE
•added 2024/10/15 9:31 a.m.•80 views

CVE-2024-9973

CVE-2024-9973 affects SourceCodester Online Eyewear Shop 1.0, specifically the Report Viewing Page component (file /admin/?page=reports). The root cause is a manipulation of the date parameter in the reports query, leading to SQL injection. Impact is described as remote, with high confidentiality...

9.8CVSS6.3AI score0.00515EPSS
SaveExploits1References5Affected Software1
osv_cve
osv_cve
•added 2024/10/15 2:15 a.m.•22 views

CVE-2024-9952

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/?page=systeminfo/contactinfo of the component Contact Information Page. The manipulation of the argument Address leads to cross site...

4.8CVSS3.2AI score0.00438EPSS
SaveExploits1References5
NVD
NVD
•added 2024/10/15 2:15 a.m.•28 views

CVE-2024-9952

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/?page=systeminfo/contactinfo of the component Contact Information Page. The manipulation of the argument Address leads to cross site...

5.1CVSS0.00438EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/10/15 2:00 a.m.•28 views

CVE-2024-9952 SourceCodester Online Eyewear Shop Contact Information Page contact_info cross site scripting

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/?page=systeminfo/contactinfo of the component Contact Information Page. The manipulation of the argument Address leads to cross site...

5.1CVSS3.2AI score0.00438EPSS
SaveExploits1References5
CVE
CVE
•added 2024/10/15 2:00 a.m.•76 views

CVE-2024-9952

CVE-2024-9952 affects SourceCodester Online Eyewear Shop 1.0. The vulnerability is in the Contact Information Page (file path /admin/?page=system_info/contact_info) where manipulation of the Address parameter can lead to cross-site scripting. It may be exploited remotely and is cited with varied ...

5.1CVSS3.2AI score0.00438EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2024/10/15 2:00 a.m.•41 views

CVE-2024-9952 SourceCodester Online Eyewear Shop Contact Information Page contact_info cross site scripting

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/?page=systeminfo/contactinfo of the component Contact Information Page. The manipulation of the argument Address leads to cross site...

5.1CVSS0.00438EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/15 12:00 a.m.•8 views

CVE-2024-9974: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file classes/Master.php?f=addtocard of the component POST Request Handler. The manipulation of the argument productid leads to s...

9.8CVSS6.4AI score0.0057EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/15 12:00 a.m.•10 views

CVE-2024-9973: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=reports of the component Report Viewing Page. The manipulation of the argument date leads to sql injection. It is possible to launch th...

9.8CVSS6.3AI score0.00515EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/15 12:00 a.m.•8 views

CVE-2024-9952: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/?page=systeminfo/contactinfo of the component Contact Information Page. The manipulation of the argument Address leads to cross site...

5.1CVSS3.2AI score0.00438EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/10/15 12:00 a.m.•6 views

PT-2024-39973

Name of the Vulnerable Software and Affected Versions SourceCodester Drag and Drop Image Upload version 1.0 Description A critical issue affects some unknown functionality of the file /upload.php, leading to unrestricted upload. The attack can be launched remotely. Recommendations For version 1.0...

8.8CVSS6.4AI score0.00579EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2024/10/15 12:00 a.m.•36 views

SourceCodester Online Eyewear Shop SQL Injection Vulnerability

SourceCodester Online Eyewear Shop is a SourceCodester open source online eyewear store website project developed using PHP and MySQL, which provides an online shopping and ordering platform for eyewear business and its potential customers. A SQL injection vulnerability exists in SourceCodester...

9.8CVSS6.6AI score0.00515EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2024/10/15 12:00 a.m.•20 views

SourceCodester Online Eyewear Shop Cross-site Script Vulnerability

SourceCodester Online Eyewear Shop is a SourceCodester open source online eyewear store website project developed using PHP and MySQL, which provides an online shopping and ordering platform for the eyewear business and its potential customers. A cross-site scripting vulnerability exists in...

5.1CVSS4.6AI score0.00438EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2024/10/15 12:00 a.m.•20 views

SourceCodester Drag and Drop Image Upload Code Vulnerabilities

SourceCodester Drag and Drop Image Upload is an open source drag and drop image upload program from SourceCodester. A code issue vulnerability exists in SourceCodester Drag and Drop Image Upload version 1.0, which stems from an unrestricted file upload issue contained in the /upload.php file...

8.8CVSS6.6AI score0.00579EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/15 12:00 a.m.•6 views

CVE-2024-9975: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Drag and Drop Image Upload 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /upload.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclos...

8.8CVSS6.1AI score0.00579EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/10/14 12:00 a.m.•19 views

PT-2024-39963 · Sourcecodester · Sourcecodester Online Eyewear Shop

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Eyewear Shop version 1.0 Description: A problem was discovered in the Contact Information Page, affecting the file "/admin/?page=system info/contact info". The manipulation of the Address argument leads to cross-site...

5.1CVSS4.5AI score0.00438EPSS
SaveExploits1References11
osv_cve
osv_cve
•added 2024/10/13 4:15 a.m.•21 views

CVE-2024-9906

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /admin/?page=inventory/viewinventory&id=2. The manipulation of the argument Code leads to cross site scripting. It is possible to launch the attac...

5.4CVSS3.5AI score0.00438EPSS
SaveExploits1References5
NVD
NVD
•added 2024/10/13 4:15 a.m.•41 views

CVE-2024-9906

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /admin/?page=inventory/viewinventory&id=2. The manipulation of the argument Code leads to cross site scripting. It is possible to launch the attac...

5.4CVSS0.00438EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/10/13 4:00 a.m.•47 views

CVE-2024-9906 SourceCodester Online Eyewear Shop cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /admin/?page=inventory/viewinventory&id=2. The manipulation of the argument Code leads to cross site scripting. It is possible to launch the attac...

5.3CVSS0.00438EPSS
SaveExploits1References5
Rows per page
Query Builder