22 matches found
CVE-2020-24193
A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows unauthenticated user to execute authentication bypass with SQL injection via the email parameter...
CVE-2021-43657
A Stored Cross-site scripting XSS vulnerability via MAster.php in Sourcecodetester Simple Client Management System SCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the vulnerable input fields...
CVE-2021-43657
A Stored Cross-site scripting XSS vulnerability via MAster.php in Sourcecodetester Simple Client Management System SCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the vulnerable input fields...
CVE-2021-43657
A Stored Cross-site scripting XSS vulnerability via MAster.php in Sourcecodetester Simple Client Management System SCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the vulnerable input fields...
CVE-2021-43657: Improper Neutralization of Input During Web Page Generation
A Stored Cross-site scripting XSS vulnerability via MAster.php in Sourcecodetester Simple Client Management System SCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the vulnerable input fields...
CVE-2021-45411
In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and leverage an arbitrary file upload vulnerability to obtain remote code execution...
Design/Logic Flaw
In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and leverage an arbitrary file upload vulnerability to obtain remote code execution...
CVE-2021-45411
In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and leverage an arbitrary file upload vulnerability to obtain remote code execution...
CVE-2021-45411
CVE-2021-45411 affects Sourcecodetester Printable Staff ID Card Creator System 1.0. The issue arises from SQL injection that compromises the database, enabling an attacker to log in and exploit an arbitrary file upload vulnerability, leading to remote code execution. Multiple connected sources co...
PT-2022-12345
Name of the Vulnerable Software and Affected Versions Sourcecodetester Printable Staff ID Card Creator System version 1.0 Description The issue allows an attacker to compromise the database via SQL injection, then log in and leverage an arbitrary file upload vulnerability to obtain remote code...
CVE-2021-45411: Unrestricted Upload of File with Dangerous Type
In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and leverage an arbitrary file upload vulnerability to obtain remote code execution...
Design/Logic Flaw
In sourcecodetester Engineers Online Portal as of 10-21-21, an attacker can manipulate the Host header as seen by the web application and cause the application to behave in unexpected ways. Very often multiple websites are hosted on the same IP address. This is where the Host Header comes in. Thi...
CVE-2021-43437
Technical details, affected versions, exploit methods, and fixes for CVE-2021-43437 are not publicly provided in the supplied documents; monitor official advisories for updates.
CVE-2021-43437: Improper Neutralization of Special Elements in Output Used by a Downstream Component
In sourcecodetester Engineers Online Portal as of 10-21-21, an attacker can manipulate the Host header as seen by the web application and cause the application to behave in unexpected ways. Very often multiple websites are hosted on the same IP address. This is where the Host Header comes in. Thi...
PT-2021-23843
Name of the Vulnerable Software and Affected Versions sourcecodetester Engineers Online Portal affected versions not specified Description The issue allows an attacker to manipulate the Host header, causing the web application to behave in unexpected ways. This is particularly relevant when...
Sourcecodetester Daily Tracker System SQL Injection (CVE-2020-24193)
An SQL injection vulnerability exists in Sourcecodetester Daily Tracker System. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2020-24193
A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows unauthenticated user to execute authentication bypass with SQL injection via the email parameter...
CVE-2020-24193
A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows unauthenticated user to execute authentication bypass with SQL injection via the email parameter...
Sql injection
A SQL injection vulnerability in login in Sourcecodetester Daily Tracker System 1.0 allows unauthenticated user to execute authentication bypass with SQL injection via the email parameter...
CVE-2020-24193
The CVE-2020-24193 entry documents a SQL injection flaw in the login of Sourcecodetester Daily Tracker System 1.0 that allows an unauthenticated user to bypass authentication via the email parameter. Connected sources confirm a practical exploit path (e.g., exploit-db entry) demonstrating an auth...