Lucene search
+L

20154 matches found

CNNVD
CNNVD
•added 2024/09/07 12:00 a.m.•24 views

SourceCodester Clinics Patient Management System security vulnerabilities

SourceCodester Clinics Patient Management System is a clinic patient management system from SourceCodester, Inc. A security vulnerability exists in SourceCodester Clinics Patient Management System version 2.0, which stems from the parameter message in the file /users.php that can lead to cross-si...

5.4CVSS4.9AI score0.00489EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2024/09/07 12:00 a.m.•27 views

PT-2024-39098 · Sourcecodester · Sourcecodester Php Crud

Name of the Vulnerable Software and Affected Versions: SourceCodester PHP CRUD version 1.0 Description: A critical issue has been found in the Delete Person Handler component, specifically in the file /endpoint/delete.php. The manipulation of the person argument leads to SQL injection. This issue...

9.8CVSS6.2AI score0.00436EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/07 12:00 a.m.•10 views

CVE-2024-8564: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/update.php. The manipulation of the argument tblpersonid/firstname/middlename/lastname leads to sql injection. The attack can be initiated...

8.8CVSS6.4AI score0.00415EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/07 12:00 a.m.•23 views

PT-2024-39099 · Unknown · Sourcecodester Php Crud

Name of the Vulnerable Software and Affected Versions: SourceCodester PHP CRUD version 1.0 Description: A security issue was discovered in the file /endpoint/Add.php, where the manipulation of the arguments first name, middle name, and last name leads to cross-site scripting. The attack can be...

6.1CVSS4.4AI score0.00308EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/07 12:00 a.m.•11 views

CVE-2024-8557: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System 1.0. This affects an unknown part of the file /foms/routers/cancel-order.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS6.4AI score0.00508EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/09/07 12:00 a.m.•22 views

PT-2024-39101 · Sourcecodester · Sourcecodester Php Crud

Name of the Vulnerable Software and Affected Versions: SourceCodester PHP CRUD version 1.0 Description: A critical issue has been identified, affecting the file /endpoint/update.php. The manipulation of the arguments tbl person id, first name, middle name, and last name can lead to SQL injection...

8.8CVSS6.2AI score0.00415EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2024/09/07 12:00 a.m.•19 views

PT-2024-39093 · Sourcecodester · Clinic'S Patient Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinics Patient Management System version 2.0 Description: A vulnerability exists in the system, allowing for an open redirect. The issue is related to the manipulation of the goto page argument in an unknown function of the fi...

6.9CVSS5.3AI score0.00636EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/07 12:00 a.m.•17 views

CVE-2024-8562: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester PHP CRUD 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /endpoint/Add.php. The manipulation of the argument firstname/middlename/lastname leads to cross site scripting. The attack may be launched...

6.1CVSS3.3AI score0.00308EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/07 12:00 a.m.•9 views

CVE-2024-8554: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Clinics Patient Management System 2.0 and classified as problematic. This issue affects some unknown processing of the file /users.php. The manipulation of the argument message leads to cross site scripting. The attack may be initiated remotely. The...

5.4CVSS3.3AI score0.00489EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/09/06 1:15 p.m.•19 views

CVE-2024-44739

Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...

8.8CVSS5.8AI score0.00543EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/06 1:15 p.m.•26 views

CVE-2024-44739

Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...

8.8CVSS0.00543EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/09/06 12:00 a.m.•36 views

CVE-2024-44739

Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...

0.00543EPSS
SaveExploits1References1
CVE
CVE
•added 2024/09/06 12:00 a.m.•96 views

CVE-2024-44739

Sourcecodester Simple Forum Website v1.0 is vulnerable to a SQL injection flaw located in the /php-sqlite-forum/?page=manage_user&id= endpoint. This vulnerability arises from the improper neutralization of special elements used in an SQL command, potentially allowing an attacker to interfere with...

8.8CVSS5.8AI score0.00543EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/06 12:00 a.m.•17 views

CVE-2024-44739

Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...

5.8AI score0.00543EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/06 12:00 a.m.•8 views

CVE-2024-44739: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Simple Forum Website v1.0 has a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...

8.8CVSS5.8AI score0.00543EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2024/09/06 12:00 a.m.•260 views

Online Pizza Ordering System 1.0 Insecure Settings

============================================================================================================================================= | Title : Online Pizza Ordering System v1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla...

7.4AI score
SaveExploits0
CNNVD
CNNVD
•added 2024/09/06 12:00 a.m.•19 views

Sourcecodester Simple Forum Website Security Vulnerabilities

SourceCodester Simple Forum Website is a simple forum website from SourceCodester, Inc. A security vulnerability exists in Sourcecodester Simple Forum Website v1.0, which originates from a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...

8.8CVSS5.8AI score0.00543EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/09/06 12:00 a.m.•7 views

PT-2024-31231

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Forum Website version 1.0 Description The issue is a SQL injection vulnerability. It affects the /php-sqlite-forum/?page=manage user&id= endpoint, where the id parameter is vulnerable. This could potentially lead to data...

8.8CVSS5.9AI score0.00543EPSS
SaveExploits1References9
osv_cve
osv_cve
•added 2024/09/04 6:15 p.m.•22 views

CVE-2024-8416

A vulnerability was found in SourceCodester Food Ordering Management System 1.0. It has been classified as critical. This affects an unknown part of the file /routers/ticket-status.php. The manipulation of the argument ticketid leads to sql injection. It is possible to initiate the attack remotel...

9.8CVSS6.3AI score0.00615EPSS
SaveExploits1References5
NVD
NVD
•added 2024/09/04 6:15 p.m.•33 views

CVE-2024-8416

A vulnerability was found in SourceCodester Food Ordering Management System 1.0. It has been classified as critical. This affects an unknown part of the file /routers/ticket-status.php. The manipulation of the argument ticketid leads to sql injection. It is possible to initiate the attack remotel...

9.8CVSS0.00615EPSS
SaveExploits1References5
Rows per page
Query Builder