Lucene search
+L

4626 matches found

Positive Technologies
Positive Technologies
added 2023/04/18 12:00 a.m.11 views

PT-2023-18265 · Sourcecodester · Student Study Center Desk Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Study Center Desk Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file manage student.php. The manipulation of the id argument leads to SQL...

9.8CVSS7.9AI score0.00766EPSS
SaveExploits1References4
OSV
OSV
added 2023/04/16 3:15 a.m.11 views

CVE-2022-30076

ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames such as s10000 through s20000. There is no rate limiting...

5.3CVSS5.8AI score0.03572EPSS
SaveExploits4References1
Positive Technologies
Positive Technologies
added 2023/04/16 12:00 a.m.11 views

PT-2023-12997 · Entab Erp · Entab Erp

Name of the Vulnerable Software and Affected Versions: ENTAB ERP version 1.0 Description: The issue allows attackers to discover users' full names via a brute force attack by trying a series of student usernames, such as s10000 through s20000, due to the lack of rate limiting. Recommendations: Fo...

5.3CVSS7.1AI score0.03572EPSS
SaveExploits4References4
Malwarebytes
Malwarebytes
added 2023/04/06 3:00 a.m.20 views

Do cyber regulations actually make K–12 schools safer? Navigating compliance while securing school and student data

Over the last decade, K-12 schools have made great strides in employing technologies that facilitate learning--especially since the onset of pandemic-induced distance education. While students have long since returned to the classroom, digital platforms for instruction, collaboration, and homewor...

7.3AI score
SaveExploits0
CVE
CVE
added 2023/03/22 2:00 p.m.109 views

CVE-2023-1568

CVE-2023-1568 affects SourceCodester Student Study Center Desk Management System 1.0. The vulnerability resides in the GET Parameter Handler for the file /admin/reports/index.php, where manipulating the date_to argument leads to cross-site scripting (XSS). It is described as exploitable remotely ...

5.4CVSS4.2AI score0.00646EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/03/22 12:00 a.m.10 views

Student Study Center Desk Management System 跨站脚本漏洞

Student Study Center Desk Management System is a student study center desk management system. A cross-site scripting vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which stems from a problem in the file /admin/assign/assign.php, where manipulation ...

6.1CVSS4.1AI score0.00587EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/03/22 12:00 a.m.18 views

Student Study Center Desk Management System SQL注入漏洞

Student Study Center Desk Management System is a student study center desk management system. A SQL injection vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which stems from a problem in the file /admin/assign/assign.php, where manipulation of the...

9.8CVSS7AI score0.00783EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/03/22 12:00 a.m.7 views

Student Study Center Desk Management System 跨站脚本漏洞

Student Study Center Desk Management System is a student study center desk management system. A cross-site scripting vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which stems from a problem in the file /admin/reports/index.php, where manipulation ...

5.4CVSS4AI score0.00646EPSS
SaveExploits1References4
NVD
NVD
added 2023/03/17 12:15 p.m.23 views

CVE-2023-1468

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=reports&datefrom=2023-02-17&dateto=2023-03-17 of the component Report Handler. The manipulation of...

9.8CVSS7.4AI score0.00541EPSS
SaveExploits0References2
Prion
Prion
added 2023/03/17 12:15 p.m.21 views

Path traversal

A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file Master.php?f=deleteimg of the component POST Parameter Handler. The manipulation of the argument path with the input C%3A%2Ffoo.txt...

6.4CVSS9.5AI score0.01083EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/03/17 11:45 a.m.57 views

CVE-2023-1468

CVE-2023-1468 affects SourceCodester Student Study Center Desk Management System 1.0, specifically the Report Handler component in admin/?page=reports&date_from=2023-02-17&date_to=2023-03-17. The vulnerability is an SQL injection caused by manipulating the date_from/date_to arguments, with remote...

9.8CVSS7.4AI score0.00541EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/03/17 11:45 a.m.33 views

CVE-2023-1468 SourceCodester Student Study Center Desk Management System Report sql injection

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=reports&datefrom=2023-02-17&dateto=2023-03-17 of the component Report Handler. The manipulation of...

6.5CVSS10AI score0.00541EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/03/17 11:45 a.m.9 views

CVE-2023-1468 SourceCodester Student Study Center Desk Management System Report sql injection

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=reports&datefrom=2023-02-17&dateto=2023-03-17 of the component Report Handler. The manipulation of...

6.5CVSS7.5AI score0.00541EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/03/17 11:45 a.m.33 views

CVE-2023-1467 SourceCodester Student Study Center Desk Management System POST Parameter path traversal

A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file Master.php?f=deleteimg of the component POST Parameter Handler. The manipulation of the argument path with the input C%3A%2Ffoo.txt...

6.5CVSS9.8AI score0.01083EPSS
SaveExploits0References2
CVE
CVE
added 2023/03/17 11:45 a.m.60 views

CVE-2023-1467

CVE-2023-1467 affects SourceCodester Student Study Center Desk Management System 1.0. The vulnerability resides in the POST Parameter Handler, specifically Master.php?f=delete_img, where manipulating the path argument (e.g., C%3A%2Ffoo.txt) enables path traversal. The issue is exploitable remotel...

9.8CVSS8.2AI score0.01083EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/03/17 11:45 a.m.31 views

CVE-2023-1466 SourceCodester Student Study Center Desk Management System view_student sql injection

A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as critical. This issue affects the function viewstudent of the file admin/?page=students/viewstudent. The manipulation of the argument id with the input 3' AND SELECT 2100 FROM...

6.5CVSS9.9AI score0.00541EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/03/17 12:00 a.m.16 views

PT-2023-17004 · Sourcecodester · Sourcecodester Student Study Center Desk Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Study Center Desk Management System version 1.0 Description: A critical issue affects the function view student of the file "admin/?page=students/view student". The manipulation of the argument id with a specific input...

9.8CVSS7.1AI score0.00541EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/03/17 12:00 a.m.8 views

Student Study Center Desk Management System 路径遍历漏洞

Student Study Center Desk Management System is a student study center desk management system. A path traversal vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which originates in the component POST Parameter Handler's Master.php? and results in path...

9.8CVSS6.9AI score0.01083EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/17 12:00 a.m.8 views

Student Study Center Desk Management System SQL注入漏洞

Student Study Center Desk Management System is a student study center desk management system. A SQL injection vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which originates from a security issue in the function viewstudent in...

9.8CVSS7.2AI score0.00541EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/17 12:00 a.m.6 views

Student Study Center Desk Management System SQL注入漏洞

Student Study Center Desk Management System is a student study center desk management system. A SQL injection vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which originates from a security issue in the admin/?page=reports&datefrom=2023-02-17& of t...

9.8CVSS7AI score0.00541EPSS
SaveExploits0References3
Rows per page
Query Builder