EUVD-2021-23218

Malware in sbrugna...

EUVD-2021-28927

Malicious code in bioql PyPI...

CVE-2021-41930

Cross site scripting XSS vulnerability in Sourcecodester Online Covid Vaccination Scheduler System v1 by oretnom23, allows attackers to execute arbitrary code via the lid parameter to /scheduler/addSchedule.php...

CVE-2021-41930

The CVE-2021-41930 entry concerns a Cross-Site Scripting (XSS) vulnerability in SourceCodester’s Online Covid Vaccination Scheduler System v1 (developer: oretnom23). The issue arises from lack of escaping/filtering of data in the lid parameter passed to /scheduler/addSchedule.php, enabling arbitr...

CVE-2021-41930: Improper Neutralization of Input During Web Page Generation

Cross site scripting XSS vulnerability in Sourcecodester Online Covid Vaccination Scheduler System v1 by oretnom23, allows attackers to execute arbitrary code via the lid parameter to /scheduler/addSchedule.php...

PT-2022-11508

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Covid Vaccination Scheduler System version 1 Description A cross site scripting XSS issue allows attackers to execute arbitrary code via the lid parameter to "/scheduler/addSchedule.php". This enables attackers to inject...

CVE-2021-37803

An SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler System 1.0 via the username in lognin.php...

CVE-2021-37803

An SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler System 1.0 via the username in lognin.php...

CVE-2021-37803

CVE-2021-37803: A SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler System 1.0, exploitable via the username parameter in login.php (lognin.php). The issue is exposed over network with no authentication required (per CVSS v3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H...

PT-2021-21874

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Covid Vaccination Scheduler System version 1.0 Description: An SQL Injection issue exists via the username in lognin.php. Recommendations: For Sourcecodester Online Covid Vaccination Scheduler System version 1.0, conside...

CVE-2021-37803: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler System 1.0 via the username in lognin.php...

SourceCodester Online Covid Vaccination Scheduler System SQL注入漏洞

The SourceCodester Online Covid Vaccination Scheduler System is an application from SourceCodester, Inc. Efficiently manage COVID-19 vaccinations with a reliable vaccine scheduling and queue management solution. A SQL injection vulnerability exists in Sourcecodester Customer Relationship Manageme...

Covid Vaccination Scheduler System 1.0 SQL Injection / Cross Site Scripting Vulnerabilities

Covid Vaccination Scheduler System version 1.0 suffers from cross site scripting and remote SQL injection vulnerabilities. Original discovery of SQL injection in this version is attributed to faisalfs10x in July of 2021. CVE-2021-36621 Vendor Description Sourcecodester Online Covid Vaccination...

CVE-2021-36622

Sourcecodester Online Covid Vaccination Scheduler System 1.0 is affected vulnerable to Arbitrary File Upload. The admin panel has an upload function of profile photo accessible at http://localhost/scheduler/admin/?page=user. An attacker could upload a malicious file such as shell.php with the...

PT-2021-21300

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Covid Vaccination Scheduler System version 1.0 Description The issue allows for Arbitrary File Upload. The admin panel has an upload function for profile photos, accessible at "http://localhost/scheduler/admin/?page=user"...

CVE-2021-36622: Unrestricted Upload of File with Dangerous Type

Sourcecodester Online Covid Vaccination Scheduler System 1.0 is affected vulnerable to Arbitrary File Upload. The admin panel has an upload function of profile photo accessible at http://localhost/scheduler/admin/?page=user. An attacker could upload a malicious file such as shell.php with the...

SourceCodester Online Covid Vaccination Scheduler System SQL Injection Vulnerability (CNVD-2021-99649)

SourceCodester Online Covid Vaccination Scheduler System is an application from SourceCodester, Inc. efficiently manages COVID-19 vaccinations through a reliable vaccine scheduling and queue management solution. SourceCodester Online Covid Vaccination Scheduler System is vulnerable to SQL...

SourceCodester Online Covid Vaccination Scheduler System SQL注入漏洞

SourceCodester Online Covid Vaccination Scheduler System is an application from SourceCodester, Inc. efficiently manages COVID-19 vaccinations through a reliable vaccine scheduling and queue management solution. SourceCodester Online Covid Vaccination Scheduler System is vulnerable to SQL...

CVE-2021-36621

Sourcecodester Online Covid Vaccination Scheduler System 1.0 is vulnerable to SQL Injection. The username parameter is vulnerable to time-based SQL injection. Upon successful dumping the admin password hash, an attacker can decrypt and obtain the plain-text password. Hence, the attacker could...

CVE-2021-36621: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Covid Vaccination Scheduler System 1.0 is vulnerable to SQL Injection. The username parameter is vulnerable to time-based SQL injection. Upon successful dumping the admin password hash, an attacker can decrypt and obtain the plain-text password. Hence, the attacker could...