Lucene search
+L

11 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/11 12:00 a.m.•0 views

CVE-2024-48813: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in employee-management-system-php-and-mysql-free-download.html taskmatic 1.0 allows a remote attacker to execute arbitrary code via the adminid parameter of the /update-employee.php component...

8.8CVSS6.6AI score0.00669EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/15 4:00 a.m.•22 views

CVE-2024-7815 CodeAstro Online Railway Reservation System Update Employee Page admin-update-employee.php cross site scripting

A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/admin-update-employee.php of the component Update Employee Page. The manipulation of the argument empfname...

5.1CVSS6.4AI score0.01195EPSS
SaveExploits3References4
NVD
NVD
•added 2024/03/26 12:15 a.m.•21 views

CVE-2024-29302

SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php...

7.5CVSS7.7AI score0.00788EPSS
SaveExploits2References2
CVE
CVE
•added 2024/03/25 12:00 a.m.•70 views

CVE-2024-29302

SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via the update-employee.php file. The root cause is the improper neutralization of special elements in the admin_id parameter, which is taken directly from $_GET and used in an SQL query. This vulnerability allows for po...

7.5CVSS8.1AI score0.00788EPSS
SaveExploits2References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/25 12:00 a.m.•14 views

CVE-2024-29302

SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php...

8.2AI score0.00788EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/25 12:00 a.m.•2 views

CVE-2024-29302: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php...

7.5CVSS5.8AI score0.00788EPSS
SaveExploits2References2
OSV
OSV
•added 2024/03/18 3:15 a.m.•16 views

CVE-2024-2577

A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /update-employee.php. The manipulation of the argument adminid leads to authorization bypass. The attack can be initiated remotely...

9.8CVSS5.5AI score0.00669EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/03/18 2:31 a.m.•59 views

CVE-2024-2577 SourceCodester Employee Task Management System update-employee.php authorization

A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /update-employee.php. The manipulation of the argument adminid leads to authorization bypass. The attack can be initiated remotely...

7.5CVSS7.5AI score0.00669EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/03/18 2:31 a.m.•26 views

CVE-2024-2577 SourceCodester Employee Task Management System update-employee.php authorization

A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /update-employee.php. The manipulation of the argument adminid leads to authorization bypass. The attack can be initiated remotely...

7.5CVSS7.3AI score0.00669EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/03/17 4:31 a.m.•22 views

CVE-2024-2554 SourceCodester Employee Task Management System update-employee.php sql injection

A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file update-employee.php. The manipulation of the argument adminid leads to sql injection. The attack can be launched...

6.5CVSS7.4AI score0.00695EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/17 12:00 a.m.•1 views

CVE-2024-2554: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Employee Task Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file update-employee.php. The manipulation of the argument adminid leads to sql injection. The attack can be launched...

8.8CVSS5.5AI score0.00695EPSS
SaveExploits1References2
Rows per page
Query Builder