Lucene search
+L

267 matches found

Positive Technologies
Positive Technologies
added 2023/04/15 12:0 a.m.13 views

PT-2023-17778 · Sourcecodester · Sourcecodester Vehicle Service Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Vehicle Service Management System version 1.0 Description: A problematic vulnerability has been found in the SourceCodester Vehicle Service Management System. This issue affects an unknown part of the file /classes/Users.php. T...

6.1CVSS4.3AI score0.00652EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/04/15 12:0 a.m.7 views

Sourcecodester Vehicle Service Management System 跨站脚本漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. A cross-site scripting vulnerability exists in SourceCodester Vehicle Service Management System version 1.0, which originates from an unknow...

6.1CVSS4.6AI score0.00652EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/14 12:0 a.m.29 views

PT-2023-17624 · Campcodes · Campcodes Online Traffic Offense Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Traffic Offense Management System version 1.0 Description: A problematic vulnerability was found in the system, affecting unknown code of the file /classes/Users.php. The manipulation of the id argument leads to cross-site...

6.1CVSS4.5AI score0.00644EPSS
SaveExploits1References7
zdt
zdt
added 2023/04/06 12:0 a.m.252 views

Music Gallery Site v1.0 - Broken Access Control Vulnerability

Exploit Title: Music Gallery Site v1.0 - Broken Access Control Exploit Author: Muhammad Navaid Zafar Ansari CVE Assigned: CVE-2023-0963 mitre.org nvd.nist.org Vendor Homepage: https://www.sourcecodester.com Software Link: Music Gallery Site Version: v 1.0 Tested on: Windows 11 Broken...

9.8CVSS9.4AI score0.0467EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2023/04/06 12:0 a.m.294 views

Music Gallery Site v1.0 - Broken Access Control

Exploit Title: Music Gallery Site v1.0 - Broken Access Control Exploit Author: Muhammad Navaid Zafar Ansari Date: 21 February 2023 CVE Assigned: CVE-2023-0963 mitre.org nvd.nist.org Vendor Homepage: https://www.sourcecodester.com Software Link: Music Gallery Site Version: v 1.0 Tested on: Windows...

9.8CVSS7.4AI score0.0467EPSS
SaveExploits5
OSV
OSV
added 2023/03/22 12:15 p.m.5 views

CVE-2023-1559

A vulnerability classified as problematic was found in SourceCodester Storage Unit Rental Management System 1.0. This vulnerability affects unknown code of the file classes/Users.php?f=save. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

7.2CVSS4.9AI score0.00911EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/03/22 12:0 a.m.7 views

Sourcecodester Storage Unit Rental Management System 代码问题漏洞

Sourcecodester Storage Unit Rental Management System is a storage unit rental management system that helps manage storage unit rental business records and monitor their records. A code issue vulnerability exists in SourceCodester Storage Unit Rental Management System version 1.0, which is caused ...

7.2CVSS5.5AI score0.00911EPSS
SaveExploits1References5
OSV
OSV
added 2023/02/22 7:15 p.m.10 views

CVE-2023-0963

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file Users.php of the component POST Request Handler. The manipulation leads to improper access controls. The attack may be initiated remotely. The...

9.8CVSS6.6AI score0.0467EPSS
SaveExploits5References3
Cvelist
Cvelist
added 2023/02/22 6:12 p.m.54 views

CVE-2023-0963 SourceCodester Music Gallery Site POST Request Users.php access control

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file Users.php of the component POST Request Handler. The manipulation leads to improper access controls. The attack may be initiated remotely. The...

7.5CVSS9.8AI score0.0467EPSS
SaveExploits5References3
Vulnrichment
Vulnrichment
added 2023/02/22 6:12 p.m.11 views

CVE-2023-0963 SourceCodester Music Gallery Site POST Request Users.php access control

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file Users.php of the component POST Request Handler. The manipulation leads to improper access controls. The attack may be initiated remotely. The...

7.5CVSS6.8AI score0.0467EPSS
SaveExploits5References3
CVE
CVE
added 2023/02/22 6:12 p.m.93 views

CVE-2023-0963

CVE-2023-0963 affects SourceCodester Music Gallery Site 1.0. The issue stems from the POST Request Handler’s Users.php file, where improper access controls can be exploited remotely. The vulnerability is publicly disclosed (VDB-221633) and has been highlighted in multiple feeds (NVD, Red Hat, PRI...

9.8CVSS8.5AI score0.0467EPSS
SaveExploits5References3Affected Software1
Cvelist
Cvelist
added 2023/02/19 8:10 a.m.51 views

CVE-2023-0916 SourceCodester Auto Dealer Management System Users.php access control

A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploi...

6.5CVSS9.1AI score0.03074EPSS
SaveExploits4References3
Cvelist
Cvelist
added 2023/02/07 7:59 p.m.33 views

CVE-2023-0732 SourceCodester Online Eyewear Shop POST Request Users.php registration cross site scripting

A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is the function registration of the file oews/classes/Users.php of the component POST Request Handler. The manipulation of the argument...

4CVSS6.3AI score0.0039EPSS
SaveExploits0References2
Prion
Prion
added 2023/01/16 7:15 p.m.16 views

Cross site scripting

A vulnerability was found in saemorris TheRadSystem. It has been classified as problematic. Affected is an unknown function of the file users.php. The manipulation of the argument q leads to cross site scripting. It is possible to launch the attack remotely. VDB-218454 is the identifier assigned ...

4CVSS6.1AI score0.00512EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/01/16 6:50 p.m.31 views

CVE-2023-0327 saemorris TheRadSystem users.php cross site scripting

A vulnerability was found in saemorris TheRadSystem. It has been classified as problematic. Affected is an unknown function of the file users.php. The manipulation of the argument q leads to cross site scripting. It is possible to launch the attack remotely. VDB-218454 is the identifier assigned ...

4CVSS6.2AI score0.00512EPSS
SaveExploits0References3
CVE
CVE
added 2023/01/16 6:50 p.m.89 views

CVE-2023-0327

The CVE-2023-0327 entry concerns saemorris TheRadSystem, specifically an XSS vulnerability in an unknown function of users.php where manipulating the q parameter enables remote exploitation. Affected versions are not specified in the provided documents. Several connected sources corroborate the X...

6.1CVSS4.8AI score0.00512EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/01/16 6:50 p.m.13 views

CVE-2023-0327 saemorris TheRadSystem users.php cross site scripting

A vulnerability was found in saemorris TheRadSystem. It has been classified as problematic. Affected is an unknown function of the file users.php. The manipulation of the argument q leads to cross site scripting. It is possible to launch the attack remotely. VDB-218454 is the identifier assigned ...

3.5CVSS3.9AI score0.00512EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/01/16 12:0 a.m.8 views

PT-2023-16181 · Unknown · Theradsystem

Name of the Vulnerable Software and Affected Versions: saemorris TheRadSystem affected versions not specified Description: A problematic issue has been identified, affecting an unknown function of the file users.php. The manipulation of the q argument leads to cross-site scripting. This issue can...

6.1CVSS6.6AI score0.00512EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2023/01/12 12:0 a.m.34 views

CVE-2022-46472

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /hss/classes/Users.php?f=delete...

7.5AI score0.00726EPSS
SaveExploits1References1
NVD
NVD
added 2022/12/15 7:15 p.m.27 views

CVE-2021-39428

Cross Site Scripting XSS vulnerability in Users.php in eyoucms 1.5.4 allows remote attackers to run arbitrary code and gain escalated privilege via the filename for editusersheadpic...

5.4CVSS0.00533EPSS
SaveExploits1References1
Rows per page
Query Builder