Lucene search
K

606 matches found

Vulnrichment
Vulnrichment
added 2023/03/17 11:45 a.m.6 views

CVE-2023-1468 SourceCodester Student Study Center Desk Management System Report sql injection

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=reports&datefrom=2023-02-17&dateto=2023-03-17 of the component Report Handler. The manipulation of...

6.5CVSS7.5AI score0.00541EPSS
Exploits0References2
CVE
CVE
added 2023/03/17 11:45 a.m.47 views

CVE-2023-1468

CVE-2023-1468 affects SourceCodester Student Study Center Desk Management System 1.0, specifically the Report Handler component in admin/?page=reports&date_from=2023-02-17&date_to=2023-03-17. The vulnerability is an SQL injection caused by manipulating the date_from/date_to arguments, with remote...

9.8CVSS7.4AI score0.00541EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/03/17 11:45 a.m.19 views

CVE-2023-1468 SourceCodester Student Study Center Desk Management System Report sql injection

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=reports&datefrom=2023-02-17&dateto=2023-03-17 of the component Report Handler. The manipulation of...

6.5CVSS10AI score0.00541EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/03/17 11:45 a.m.13 views

CVE-2023-1467 SourceCodester Student Study Center Desk Management System POST Parameter path traversal

A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file Master.php?f=deleteimg of the component POST Parameter Handler. The manipulation of the argument path with the input C%3A%2Ffoo.txt...

6.5CVSS9.8AI score0.01083EPSS
Exploits0References2
CVE
CVE
added 2023/03/17 11:45 a.m.44 views

CVE-2023-1467

CVE-2023-1467 affects SourceCodester Student Study Center Desk Management System 1.0. The vulnerability resides in the POST Parameter Handler, specifically Master.php?f=delete_img, where manipulating the path argument (e.g., C%3A%2Ffoo.txt) enables path traversal. The issue is exploitable remotel...

9.8CVSS8.2AI score0.01083EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/03/17 11:45 a.m.12 views

CVE-2023-1466 SourceCodester Student Study Center Desk Management System view_student sql injection

A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as critical. This issue affects the function viewstudent of the file admin/?page=students/viewstudent. The manipulation of the argument id with the input 3' AND SELECT 2100 FROM...

6.5CVSS9.9AI score0.00541EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/03/17 12:0 a.m.2 views

Student Study Center Desk Management System SQL注入漏洞

Student Study Center Desk Management System is a student study center desk management system. A SQL injection vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which originates from a security issue in the function viewstudent in...

9.8CVSS7.2AI score0.00541EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/03/17 12:0 a.m.1 views

Student Study Center Desk Management System SQL注入漏洞

Student Study Center Desk Management System is a student study center desk management system. A SQL injection vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which originates from a security issue in the admin/?page=reports&datefrom=2023-02-17& of t...

9.8CVSS7AI score0.00541EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/03/17 12:0 a.m.1 views

Student Study Center Desk Management System 路径遍历漏洞

Student Study Center Desk Management System is a student study center desk management system. A path traversal vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which originates in the component POST Parameter Handler's Master.php? and results in path...

9.8CVSS6.9AI score0.01083EPSS
Exploits0References3
Rapid7 Blog
Rapid7 Blog
added 2023/03/15 3:41 p.m.15 views

Rapid7 Threat Command Delivered 311% ROI: 2023 Forrester Consulting Total Economic Impact™ Study

Volume up and not in a good way Security teams must continuously contort their efforts to effectively respond to the growing volume of cyberthreats. These constantly shifting methods in the security operations center SOC can be difficult to manage in the face of emerging external threats—it can b...

6.6AI score
Exploits0
NVD
NVD
added 2023/03/15 8:15 a.m.12 views

CVE-2023-1407

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/manageuser.php. The manipulation of the argument id leads to sql injection. The attack can be...

7.2CVSS6AI score0.00713EPSS
Exploits1References3
CVE
CVE
added 2023/03/15 6:32 a.m.53 views

CVE-2023-1407

CVE-2023-1407 affects SourceCodester Student Study Center Desk Management System 1.0, via an SQL injection in the /admin/user/manage_user.php file where manipulating the id parameter enables remote exploitation. Several sources confirm the issue and describe the root cause as improper handling of...

7.2CVSS6.2AI score0.00713EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/03/15 6:32 a.m.22 views

CVE-2023-1407 SourceCodester Student Study Center Desk Management System manage_user.php sql injection

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/manageuser.php. The manipulation of the argument id leads to sql injection. The attack can be...

5.8CVSS7.6AI score0.00713EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/03/15 12:0 a.m.2 views

Student Study Center Desk Management System SQL注入漏洞

Student Study Center Desk Management System is a student study center desk management system. A SQL injection vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which stems from a problem in the file /admin/user/manageuser.php, where manipulation of th...

7.2CVSS5.7AI score0.00713EPSS
Exploits1References4
Trend Micro Simply Security
Trend Micro Simply Security
added 2023/03/02 12:0 a.m.14 views

Leveraging Data Science to Minimize the Blast Radius of Ransomware Attacks

In this blog entry, we present a case study that illustrates how data-science techniques can be used to gain valuable insights about ransomware groups' targeting patterns as detailed in our research paper, “What Decision-Makers Need to Know About Ransomware Risk.”...

1.6AI score
Exploits0
OSV
OSV
added 2023/02/25 4:27 p.m.7 views

MAL-2023-3718 Malicious code in hackedstudy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ac8172f62729e26ba667190c413cf7a676a52e58bc83c9d875171bb1ec8428dc EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

7.2AI score
Exploits0References1
The Hacker News
The Hacker News
added 2023/02/24 9:0 a.m.2 views

Even Top-Ranked Android Apps in Google Play Store Provide Misleading Data Safety Labels

An investigation into data safety labels for Android apps available on the Google Play Store has uncovered "serious loopholes" that allow apps to provide misleading or outright false information. The study, conducted by the Mozilla Foundation as part of its Privacy Not Included initiative, compar...

6.1AI score
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 3:58 a.m.1 views

SUSE CVE-2020-12723

regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive Sstudychunk calls...

6.4CVSS9.4AI score0.0602EPSS
Exploits0References64
HackRead
HackRead
added 2023/01/30 2:39 a.m.16 views

Why Cybersecurity Business Needs a Real-Time Collaboration Tool

By Owais Sultan When the Cybercrime in a Pandemic World study PDF was released in late 2021, the report noted that… This is a post from HackRead.com Read the original post: Why Cybersecurity Business Needs a Real-Time Collaboration Tool...

2.7AI score
Exploits0
CNVD
CNVD
added 2023/01/16 12:0 a.m.8 views

XSS Vulnerability in Study Pass

Study Pass is a free app developed by Beijing Century Superstar Information Technology Development Limited Liability Company in 2016 that integrates mobile teaching, mobile learning, mobile reading and mobile socializing, and supports mobile only Android / iOS / Harmony OS. XSS vulnerability exis...

5.8AI score
Exploits0
Rows per page
Query Builder