Lucene search
+L

84 matches found

CNNVD
CNNVD
added 2023/03/22 12:00 a.m.7 views

Student Study Center Desk Management System 跨站脚本漏洞

Student Study Center Desk Management System is a student study center desk management system. A cross-site scripting vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which stems from a problem in the file /admin/reports/index.php, where manipulation ...

5.4CVSS4AI score0.00646EPSS
SaveExploits1References4
NVD
NVD
added 2023/03/17 12:15 p.m.22 views

CVE-2023-1468

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=reports&datefrom=2023-02-17&dateto=2023-03-17 of the component Report Handler. The manipulation of...

9.8CVSS7.4AI score0.00541EPSS
SaveExploits0References2
Prion
Prion
added 2023/03/17 12:15 p.m.19 views

Path traversal

A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file Master.php?f=deleteimg of the component POST Parameter Handler. The manipulation of the argument path with the input C%3A%2Ffoo.txt...

6.4CVSS9.5AI score0.01083EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/03/17 11:45 a.m.31 views

CVE-2023-1468 SourceCodester Student Study Center Desk Management System Report sql injection

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=reports&datefrom=2023-02-17&dateto=2023-03-17 of the component Report Handler. The manipulation of...

6.5CVSS10AI score0.00541EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/03/17 11:45 a.m.8 views

CVE-2023-1468 SourceCodester Student Study Center Desk Management System Report sql injection

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=reports&datefrom=2023-02-17&dateto=2023-03-17 of the component Report Handler. The manipulation of...

6.5CVSS7.5AI score0.00541EPSS
SaveExploits0References2
CVE
CVE
added 2023/03/17 11:45 a.m.55 views

CVE-2023-1468

CVE-2023-1468 affects SourceCodester Student Study Center Desk Management System 1.0, specifically the Report Handler component in admin/?page=reports&date_from=2023-02-17&date_to=2023-03-17. The vulnerability is an SQL injection caused by manipulating the date_from/date_to arguments, with remote...

9.8CVSS7.4AI score0.00541EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/03/17 11:45 a.m.31 views

CVE-2023-1467 SourceCodester Student Study Center Desk Management System POST Parameter path traversal

A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file Master.php?f=deleteimg of the component POST Parameter Handler. The manipulation of the argument path with the input C%3A%2Ffoo.txt...

6.5CVSS9.8AI score0.01083EPSS
SaveExploits0References2
CVE
CVE
added 2023/03/17 11:45 a.m.59 views

CVE-2023-1467

CVE-2023-1467 affects SourceCodester Student Study Center Desk Management System 1.0. The vulnerability resides in the POST Parameter Handler, specifically Master.php?f=delete_img, where manipulating the path argument (e.g., C%3A%2Ffoo.txt) enables path traversal. The issue is exploitable remotel...

9.8CVSS8.2AI score0.01083EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/03/17 11:45 a.m.29 views

CVE-2023-1466 SourceCodester Student Study Center Desk Management System view_student sql injection

A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as critical. This issue affects the function viewstudent of the file admin/?page=students/viewstudent. The manipulation of the argument id with the input 3' AND SELECT 2100 FROM...

6.5CVSS9.9AI score0.00541EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/03/17 12:00 a.m.5 views

Student Study Center Desk Management System SQL注入漏洞

Student Study Center Desk Management System is a student study center desk management system. A SQL injection vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which originates from a security issue in the admin/?page=reports&datefrom=2023-02-17& of t...

9.8CVSS7AI score0.00541EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/17 12:00 a.m.6 views

Student Study Center Desk Management System 路径遍历漏洞

Student Study Center Desk Management System is a student study center desk management system. A path traversal vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which originates in the component POST Parameter Handler's Master.php? and results in path...

9.8CVSS6.9AI score0.01083EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/17 12:00 a.m.8 views

Student Study Center Desk Management System SQL注入漏洞

Student Study Center Desk Management System is a student study center desk management system. A SQL injection vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which originates from a security issue in the function viewstudent in...

9.8CVSS7.2AI score0.00541EPSS
SaveExploits0References3
NVD
NVD
added 2023/03/15 8:15 a.m.22 views

CVE-2023-1407

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/manageuser.php. The manipulation of the argument id leads to sql injection. The attack can be...

7.2CVSS6AI score0.00713EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/03/15 6:32 a.m.40 views

CVE-2023-1407 SourceCodester Student Study Center Desk Management System manage_user.php sql injection

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/manageuser.php. The manipulation of the argument id leads to sql injection. The attack can be...

5.8CVSS7.6AI score0.00713EPSS
SaveExploits1References3
CVE
CVE
added 2023/03/15 6:32 a.m.64 views

CVE-2023-1407

CVE-2023-1407 affects SourceCodester Student Study Center Desk Management System 1.0, via an SQL injection in the /admin/user/manage_user.php file where manipulating the id parameter enables remote exploitation. Several sources confirm the issue and describe the root cause as improper handling of...

7.2CVSS6.2AI score0.00713EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/03/15 12:00 a.m.6 views

Student Study Center Desk Management System SQL注入漏洞

Student Study Center Desk Management System is a student study center desk management system. A SQL injection vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which stems from a problem in the file /admin/user/manageuser.php, where manipulation of th...

7.2CVSS5.7AI score0.00713EPSS
SaveExploits1References4
NVD
NVD
added 2023/01/12 10:15 p.m.23 views

CVE-2022-47102

A cross-site scripting XSS vulnerability in Student Study Center Management System V 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

5.4CVSS5.3AI score0.00534EPSS
SaveExploits1References1
OSV
OSV
added 2023/01/12 10:15 p.m.11 views

CVE-2022-47102

A cross-site scripting XSS vulnerability in Student Study Center Management System V 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

5.4CVSS5.9AI score0.00534EPSS
SaveExploits1References1
Prion
Prion
added 2023/01/12 10:15 p.m.33 views

Cross site scripting

A cross-site scripting XSS vulnerability in Student Study Center Management System V 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

4.9CVSS5.3AI score0.00534EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/12 12:00 a.m.11 views

PT-2023-15171 · Unknown · Student Study Center Desk Management System

Name of the Vulnerable Software and Affected Versions: Student Study Center Management System version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter. This enables the execution of...

5.4CVSS6.7AI score0.00534EPSS
SaveExploits1References4
Rows per page
Query Builder