Lucene search
+L

267 matches found

Positive Technologies
Positive Technologies
added 2024/04/12 12:0 a.m.8 views

PT-2024-27221 · Sourcecodester · Sourcecodester Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Laboratory Management System version 1.0 Description: A security issue has been found that allows cross-site scripting XSS attacks. This is due to the manipulation of the id argument in the /classes/Users.php file, whi...

5.4CVSS4.3AI score0.00605EPSS
SaveExploits1References7
OSV
OSV
added 2024/04/04 9:15 p.m.7 views

CVE-2024-3314

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Users.php. The manipulation leads to sql injection. The attack may be initiated remotely. The identifier VDB-259385 was...

9.8CVSS5.7AI score0.00545EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/04/04 9:0 p.m.34 views

CVE-2024-3314 SourceCodester Computer Laboratory Management System Users.php sql injection

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Users.php. The manipulation leads to sql injection. The attack may be initiated remotely. The identifier VDB-259385 was...

6.5CVSS7AI score0.00545EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/04/04 9:0 p.m.20 views

CVE-2024-3314 SourceCodester Computer Laboratory Management System Users.php sql injection

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Users.php. The manipulation leads to sql injection. The attack may be initiated remotely. The identifier VDB-259385 was...

6.5CVSS6.8AI score0.00545EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/04/04 12:0 a.m.8 views

PT-2024-25128 · Sourcecodester · Sourcecodester Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Laboratory Management System version 1.0 Description: A critical issue affects the processing of the file /classes/Users.php, leading to sql injection. The attack may be initiated remotely. Recommendations: For...

9.8CVSS6.9AI score0.00545EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/04/01 12:0 a.m.7 views

SourceCodester Computer Laboratory Management System 授权问题漏洞

Computer Laboratory Management System is a computer laboratory management system. An authorization issue vulnerability exists in SourceCodester Computer Laboratory Management System version 1.0, which stems from a security issue in the saveusers function in /classes/Users.php, which results in...

5.5CVSS5.6AI score0.00487EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2024/03/17 1:0 a.m.21 views

CVE-2024-2535 MAGESH-K21 Online-College-Event-Hall-Reservation-System users.php cross site scripting

A vulnerability has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/users.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotel...

4CVSS4.2AI score0.00419EPSS
SaveExploits0References3
CVE
CVE
added 2024/03/17 1:0 a.m.53 views

CVE-2024-2535

MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 is affected by a Cross-Site Scripting vulnerability in the /admin/users.php script, triggered by a manipulated id parameter. The issue is a reflected XSS affecting unknown code paths, with remote exploitation possible and public disclosu...

6.1CVSS3.8AI score0.00419EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2024/03/16 10:31 p.m.19 views

CVE-2024-2533 MAGESH-K21 Online-College-Event-Hall-Reservation-System update-users.php cross site scripting

A vulnerability, which was classified as problematic, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-users.php. The manipulation of the argument id leads to cross site scripting. The...

4CVSS4AI score0.0045EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/03/16 10:31 p.m.14 views

CVE-2024-2533 MAGESH-K21 Online-College-Event-Hall-Reservation-System update-users.php cross site scripting

A vulnerability, which was classified as problematic, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-users.php. The manipulation of the argument id leads to cross site scripting. The...

4CVSS6AI score0.0045EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/16 12:0 a.m.7 views

Online-College-Event-Hall-Reservation-System SQL Injection Vulnerability

Online-College-Event-Hall-Reservation-System is an online college event hall reservation system by Magesh K individual developer. Designed to automate the hall booking process to eliminate manual logging and increase efficiency. Online-College-Event-Hall-Reservation-System suffers from a SQL...

8.8CVSS7.9AI score0.00514EPSS
SaveExploits0References4
OSV
OSV
added 2024/03/06 11:4 a.m.45 views

BIT-PHPLIST-2020-13827

phpList before 3.5.4 allows XSS via /lists/admin/user.php and /lists/admin/users.php...

6.1CVSS6AI score0.00848EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/03/03 12:0 a.m.5 views

Online Mobile Store Management System Code Issue Vulnerability

Online Mobile Store Management System is an online mobile store management system by Carlo Montero Personal Developer. A code issue exists in version 1.0 of the Online Mobile Store Management System that stems from an unrestricted upload issue in the /classes/Users.php file...

8.8CVSS7.2AI score0.00832EPSS
SaveExploits1References4
OSV
OSV
added 2024/02/23 4:15 p.m.5 views

CVE-2024-1823

A vulnerability classified as critical was found in CodeAstro Simple Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file users.php of the component Backend. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit h...

5.3CVSS5.3AI score0.0068EPSS
SaveExploits1References3
Prion
Prion
added 2024/02/23 4:15 p.m.27 views

Improper access control

A vulnerability classified as critical was found in CodeAstro Simple Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file users.php of the component Backend. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit h...

5CVSS7.3AI score0.0068EPSS
SaveExploits1References3
CVE
CVE
added 2024/02/23 3:31 p.m.93 views

CVE-2024-1823

CVE-2024-1823 affects CodeAstro Simple Voting System 1.0, specifically the Backend users.php file. The root cause is improper access controls on this file, enabling a remote attack. Multiple sources confirm the vulnerability allows unauthorized access, and exploitation details have been publicly ...

5.3CVSS5.5AI score0.0068EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/02/23 3:31 p.m.15 views

CVE-2024-1823 CodeAstro Simple Voting System Backend users.php access control

A vulnerability classified as critical was found in CodeAstro Simple Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file users.php of the component Backend. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit h...

5.3CVSS5.5AI score0.0068EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/02/23 3:31 p.m.40 views

CVE-2024-1823 CodeAstro Simple Voting System Backend users.php access control

A vulnerability classified as critical was found in CodeAstro Simple Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file users.php of the component Backend. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit h...

5.3CVSS5.8AI score0.0068EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/02/23 12:0 a.m.7 views

CodeAstro Simple Voting System Access Control Error Vulnerability

CodeAstro Simple Voting System is a simple voting system from CodeAstro. An Access Control Error vulnerability exists in CodeAstro Simple Voting System version 1.0, which stems from the file users.php that causes incorrect access control...

5.3CVSS6.8AI score0.0068EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/02/23 12:0 a.m.7 views

PT-2024-18338 · Codeastro · Codeastro Simple Voting System

Name of the Vulnerable Software and Affected Versions: CodeAstro Simple Voting System version 1.0 Description: A critical vulnerability was found in the CodeAstro Simple Voting System, affecting an unknown functionality of the file users.php of the component Backend. This vulnerability leads to...

5.3CVSS6.9AI score0.0068EPSS
SaveExploits1References8
Rows per page
Query Builder