Lucene search
+L

12076 matches found

Positive Technologies
Positive Technologies
added 2023/04/08 12:00 a.m.16 views

PT-2023-17370 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue has been found in the Subcategory Handler component, specifically in the file /classes/Master.php?f=save sub category. The manipulation of the sub...

8.8CVSS7AI score0.00717EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/04/08 12:00 a.m.14 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

9.8CVSS7.8AI score0.00726EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/08 12:00 a.m.13 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the fi...

9.8CVSS7.9AI score0.00726EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/08 12:00 a.m.14 views

PT-2023-17367 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue affects the function save inventory of the file /admin/product/manage.php. The manipulation of the argument id leads to sql injection. The attack may be...

8.8CVSS7AI score0.00717EPSS
SaveExploits1References6
OSV
OSV
added 2023/04/07 6:15 p.m.6 views

CVE-2023-1942

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/?page=user of the component Avatar Handler. The manipulation leads to unrestricted upload. The attack can...

9.8CVSS6.2AI score0.00893EPSS
SaveExploits1References3
Prion
Prion
added 2023/04/07 6:15 p.m.25 views

Out-of-bounds

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/?page=user of the component Avatar Handler. The manipulation leads to unrestricted upload. The attack can...

6.5CVSS9.5AI score0.00893EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/04/07 6:00 p.m.58 views

CVE-2023-1942

CVE-2023-1942 affects SourceCodester Online Computer and Laptop Store 1.0. The Avatar Handler’s /admin/?page=user functionality is vulnerable to unrestricted file uploads, enabling remote exploitation. Documents indicate an attacker can upload arbitrary files to execute code, with the vulnerabili...

9.8CVSS8.1AI score0.00893EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/04/07 6:00 p.m.42 views

CVE-2023-1942 SourceCodester Online Computer and Laptop Store Avatar unrestricted upload

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/?page=user of the component Avatar Handler. The manipulation leads to unrestricted upload. The attack can...

6.5CVSS9.8AI score0.00893EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/04/07 12:00 a.m.11 views

Online Computer and Laptop Store 代码问题漏洞

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 contains an arbitrary file upload vulnerability, which stems from the lack of valid validation of uploaded files in file/admin/?page=user, and can...

9.8CVSS7.5AI score0.00893EPSS
SaveExploits1References4
CNVD
CNVD
added 2023/04/07 12:00 a.m.91 views

Online Computer and Laptop Store Arbitrary File Upload Vulnerability

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to arbitrary file uploads. The vulnerability stems from a lack of validation of uploaded files in the...

9.5AI score0.04353EPSS
SaveExploits4Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/07 12:00 a.m.13 views

PT-2023-17358 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue has been found in the Avatar Handler component, specifically affecting an unknown functionality of the file /admin/?page=user. This issue leads to...

9.8CVSS6.5AI score0.00893EPSS
SaveExploits1References5
NVD
NVD
added 2023/04/05 8:15 a.m.27 views

CVE-2023-1857

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/?page=product/manageproduct&id=2. The manipulation of the argument Product Name leads to cross site scripting. Th...

6.1CVSS4.2AI score0.00611EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/05 8:15 a.m.12 views

CVE-2023-1857

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/?page=product/manageproduct&id=2. The manipulation of the argument Product Name leads to cross site scripting. Th...

6.1CVSS3.8AI score0.00611EPSS
SaveExploits1References3
Prion
Prion
added 2023/04/05 8:15 a.m.19 views

Cross site scripting

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/?page=product/manageproduct&id=2. The manipulation of the argument Product Name leads to cross site scripting. Th...

3.3CVSS6AI score0.00611EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/04/05 7:40 a.m.62 views

CVE-2023-1857

CVE-2023-1857 impacts SourceCodester Online Computer and Laptop Store 1.0. The vulnerability is a cross-site scripting flaw in the admin file for managing products, specifically /admin/?page=product/manage_product&id=2, where manipulating the Product Name parameter (due to insufficient input filt...

6.1CVSS4.7AI score0.00611EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/04/05 12:00 a.m.10 views

编号撤回

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. This CVE number has been withdrawn...

5.5AI score
SaveExploits0References3
CNNVD
CNNVD
added 2023/04/05 12:00 a.m.10 views

SourceCodester Online Computer and Laptop Store 跨站脚本漏洞

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. A cross-site scripting vulnerability exists in Online Computer and Laptop Store v1.0. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in...

6.1CVSS6.2AI score0.00611EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/05 12:00 a.m.9 views

PT-2023-17288 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A vulnerability was found in the software, classified as problematic. It affects some unknown functionality of the file "/admin/?page=product/manage product&id=2". The...

6.1CVSS4AI score0.00611EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/04/05 12:00 a.m.14 views

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.3.3, which...

7.4CVSS6.3AI score0.00493EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/04 9:15 a.m.9 views

CVE-2023-1826

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file php-ocls\admin\systeminfo\index.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initiate the atta...

9.8CVSS5.5AI score0.04353EPSS
SaveExploits4References3
Rows per page
Query Builder