Lucene search
K

133 matches found

OSV
OSV
added 2024/06/30 11:15 p.m.2 views

CVE-2024-6418

A vulnerability classified as critical has been found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file /classes/Users.php?f=registeruser. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

5.3CVSS5.7AI score
Exploits0References4
NVD
NVD
added 2024/06/30 11:15 p.m.19 views

CVE-2024-6418

A vulnerability classified as critical has been found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file /classes/Users.php?f=registeruser. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS0.00508EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/06/30 11:0 p.m.8 views

CVE-2024-6418 SourceCodester Medicine Tracker System sql injection

A vulnerability classified as critical has been found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file /classes/Users.php?f=registeruser. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS7.4AI score0.00508EPSS
Exploits1References4
CVE
CVE
added 2024/06/30 11:0 p.m.50 views

CVE-2024-6418

CVE-2024-6418 affects SourceCodester Medicine Tracker System 1.0. The vulnerability is an SQL injection in the registration path via the username parameter at /classes/Users.php?f=register_user. Root cause: improper handling/concatenation of the username leads to injection. Impact and exploitabil...

7.5CVSS6.5AI score0.00508EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/06/30 11:0 p.m.22 views

CVE-2024-6418 SourceCodester Medicine Tracker System sql injection

A vulnerability classified as critical has been found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file /classes/Users.php?f=registeruser. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS0.00508EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/06/30 12:0 a.m.2 views

PT-2024-37611 · Sourcecodester · Sourcecodester Medicine Tracker System

Name of the Vulnerable Software and Affected Versions: SourceCodester Medicine Tracker System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Medicine Tracker System. This issue affects an unknown part of the file /classes/Users.php?f=register user. The...

7.5CVSS7.9AI score0.00508EPSS
Exploits1References7
CNNVD
CNNVD
added 2024/06/30 12:0 a.m.2 views

Medicine Tracker System SQL Injection Vulnerability

Medicine Tracker System is a drug tracking system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Medicine Tracker System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to an SQL injection...

9.8CVSS7.9AI score0.00572EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/06/30 12:0 a.m.2 views

Medicine Tracker System Security Vulnerability

Medicine Tracker System is a drug tracking system by the individual developer Carlo Montero. A security vulnerability exists in Medicine Tracker System version 1.0, which stems from an incorrect manipulation of the parameter username that can lead to an SQL injection...

7.5CVSS7.4AI score0.00508EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/01/16 12:0 a.m.3 views

CVE-2024-22628

Budget and Expense Tracker System v1.0 is vulnerable to SQL Injection via /expensebudget/admin/?page=reports/budget&datestart=2023-12-28&dateend=...

7.4AI score0.00626EPSS
Exploits1References1
CVE
CVE
added 2024/01/16 12:0 a.m.225 views

CVE-2024-22628

Budget and Expense Tracker System v1.0 is vulnerable to SQL Injection through the admin reports endpoint: /expense_budget/admin/?page=reports/budget&date_start=2023-12-28&date_end=. The vulnerability affects the endpoint handling date_start/date_end parameters without proper validation, enabling ...

7.2CVSS7.4AI score0.00626EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2023/12/27 12:0 a.m.2 views

Medicine Tracker System SQL Injection Vulnerability

Medicine Tracker System is a medicine tracking system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Medicine Tracking System version 1.0, which stems from some unknown processing in /classes/Master.php that leads to SQL injection via the parameters...

9.8CVSS8AI score0.00684EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2023/11/04 12:0 a.m.5 views

The vulnerability of the Request Tracker system for enterprise-level request tracking and monitoring lies in its excessive data output when searching transactions by authenticated users in the transaction builder. This allows attackers to gain unauthorized access to confidential information.

The vulnerability of the Request Tracker system for enterprise-level order tracking and monitoring exists due to excessive data output by the application when searching transactions for authenticated users in the transaction request builder. Exploiting this vulnerability could allow a malicious...

4.8CVSS7.2AI score0.00717EPSS
Exploits0References10Affected Software2
CNVD
CNVD
added 2023/10/17 12:0 a.m.12 views

Medicine Tracker System Cross-Site Scripting Vulnerability

Medicine Tracker System is a medication tracking system by Carlo Montero personal developer. Medicine Tracker System v1.0 suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter page of the file index.ph...

6.1CVSS6.2AI score0.00505EPSS
Exploits1References1
OSV
OSV
added 2023/10/14 1:15 p.m.1 views

CVE-2023-5581

A vulnerability classified as problematic was found in SourceCodester Medicine Tracker System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

6.1CVSS3.9AI score0.00505EPSS
Exploits1References3
NVD
NVD
added 2023/10/14 1:15 p.m.11 views

CVE-2023-5581

A vulnerability classified as problematic was found in SourceCodester Medicine Tracker System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

6.1CVSS4.6AI score0.00505EPSS
Exploits1References3
Prion
Prion
added 2023/10/14 1:15 p.m.9 views

Cross site scripting

A vulnerability classified as problematic was found in SourceCodester Medicine Tracker System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

4CVSS6.1AI score0.00505EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/10/14 12:31 p.m.19 views

CVE-2023-5581 SourceCodester Medicine Tracker System index.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Medicine Tracker System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

4CVSS6.3AI score0.00505EPSS
Exploits1References3
CVE
CVE
added 2023/10/14 12:31 p.m.64 views

CVE-2023-5581

CVE-2023-5581 affects SourceCodester Medicine Tracker System 1.0. The vulnerability is an XSS flaw in the index.php file triggered by manipulating the page parameter. Exploitation can be performed remotely, and the exploit has been disclosed publicly. Multiple sources identify the issue but do no...

6.1CVSS4.9AI score0.00505EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/14 12:31 p.m.21 views

CVE-2023-5581 SourceCodester Medicine Tracker System index.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Medicine Tracker System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...

4CVSS6.3AI score0.00505EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/06/09 12:0 a.m.3 views

Sales Tracker Management System 跨站脚本漏洞

Sales Tracker Management System is a sales tracking management system by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in Sales Tracker Management System version 1.0, which stems from a problem with the file /classes/Users.php?f=save, where incorrect manipulation o...

4.8CVSS4AI score0.02264EPSS
Exploits4References7
Rows per page
Query Builder