Lucene search
+L

15979 matches found

NVD
NVD
added 2024/04/08 2:15 p.m.26 views

CVE-2024-3441

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Employee/edit-profile.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

8.8CVSS6.7AI score0.00713EPSS
SaveExploits1References4
NVD
NVD
added 2024/04/08 2:15 p.m.26 views

CVE-2024-3440

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/editprofile.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has...

7.2CVSS5.2AI score0.00706EPSS
SaveExploits1References4
CVE
CVE
added 2024/04/08 2:00 p.m.66 views

CVE-2024-3441

The CVE-2024-3441 entry concerns SourceCodester Prison Management System 1.0, where an SQL injection vulnerability exists in /Employee/edit-profile.php. The issue is exploitable remotely and has been publicly disclosed. Connected documents corroborate the affected product/version and the SQLi fla...

8.8CVSS6.7AI score0.00713EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/08 2:00 p.m.15 views

CVE-2024-3441 SourceCodester Prison Management System edit-profile.php sql injection

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Employee/edit-profile.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

6.5CVSS7.3AI score0.00713EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/04/08 2:00 p.m.34 views

CVE-2024-3441 SourceCodester Prison Management System edit-profile.php sql injection

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Employee/edit-profile.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

6.5CVSS7AI score0.00713EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/04/08 2:00 p.m.14 views

CVE-2024-3440 SourceCodester Prison Management System edit_profile.php sql injection

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/editprofile.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has...

5.8CVSS5.3AI score0.00706EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/04/08 2:00 p.m.35 views

CVE-2024-3440 SourceCodester Prison Management System edit_profile.php sql injection

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/editprofile.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has...

5.8CVSS5.6AI score0.00706EPSS
SaveExploits1References4
CVE
CVE
added 2024/04/08 2:00 p.m.65 views

CVE-2024-3440

CVE-2024-3440 affects SourceCodester Prison Management System 1.0, where an SQL injection in the /Admin/edit_profile.php endpoint enables remote exploitation. Public exploit/disclosure is indicated, with a high-severity impact profile (C/I/A: high). The vulnerability arises from an injectable inp...

7.2CVSS5.2AI score0.00706EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2024/04/08 1:15 p.m.20 views

CVE-2014-125111

A vulnerability was found in namithjawahar Wp-Insert up to 2.0.8 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 2.0.9 is able to address this issue. The...

4CVSS3.7AI score0.0042EPSS
SaveExploits0References3
CVE
CVE
added 2024/04/08 1:00 p.m.60 views

CVE-2011-10006

GamerZ WP-PostRatings up to 1.64 contains a cross-site scripting (XSS) flaw in wp-postratings.php. The vulnerability, which can be triggered remotely, affects an unknown part of the file and can be exploited without user privileges, with user interaction required. The issue is mitigated by upgrad...

6.1CVSS3.7AI score0.00433EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/08 1:00 p.m.17 views

CVE-2011-10006 GamerZ WP-PostRatings wp-postratings.php cross site scripting

A vulnerability was found in GamerZ WP-PostRatings up to 1.64. It has been classified as problematic. This affects an unknown part of the file wp-postratings.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.65 is able to...

4CVSS6.5AI score0.00433EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/04/08 1:00 p.m.31 views

CVE-2011-10006 GamerZ WP-PostRatings wp-postratings.php cross site scripting

A vulnerability was found in GamerZ WP-PostRatings up to 1.64. It has been classified as problematic. This affects an unknown part of the file wp-postratings.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.65 is able to...

4CVSS3.8AI score0.00433EPSS
SaveExploits0References5
NVD
NVD
added 2024/04/08 12:15 p.m.23 views

CVE-2024-3439

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Account/login.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

9.8CVSS7.5AI score0.00851EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/04/08 11:31 a.m.16 views

CVE-2024-3439 SourceCodester Prison Management System login.php sql injection

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Account/login.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

7.5CVSS7.3AI score0.00851EPSS
SaveExploits1References4
CVE
CVE
added 2024/04/08 11:31 a.m.79 views

CVE-2024-3439

The CVE-2024-3439 entry concerns SourceCodester Prison Management System 1.0, with a SQL injection in the /Account/login.php function. The vulnerability arises from manipulation of an unknown function in that file, enabling remote exploitation. Public disclosure of the exploit is noted. Multiple ...

9.8CVSS7.5AI score0.00851EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2024/04/08 11:31 a.m.31 views

CVE-2024-3439 SourceCodester Prison Management System login.php sql injection

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Account/login.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

7.5CVSS7.8AI score0.00851EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/04/08 11:00 a.m.31 views

CVE-2024-3438 SourceCodester Prison Management System login.php sql injection

A vulnerability was found in SourceCodester Prison Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /Admin/login.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public...

7.5CVSS7.8AI score0.00851EPSS
SaveExploits1References4
NVD
NVD
added 2024/04/08 12:15 a.m.25 views

CVE-2024-3436

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Admin/edit-photo.php of the component Avatar Handler. The manipulation of the argument avatar leads to unrestricted upload. The attack c...

7.2CVSS6.5AI score0.00912EPSS
SaveExploits1References4
NVD
NVD
added 2024/04/08 12:15 a.m.24 views

CVE-2024-3434

A vulnerability classified as critical was found in CP Plus Wi-Fi Camera up to 20240401. Affected by this vulnerability is an unknown functionality of the component User Management. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclos...

5.5CVSS5.6AI score0.00463EPSS
SaveExploits0References4
CVE
CVE
added 2024/04/08 12:00 a.m.94 views

CVE-2024-3437

CVE-2024-3437 affects SourceCodester Prison Management System 1.0, specifically the Avatar Handler in /Admin/add-admin.php. The avatar parameter can be manipulated to achieve unrestricted file upload, enabling remote exploitation. Multiple sources confirm a remote, unauthenticated impact with pub...

7.5CVSS7.3AI score0.01063EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder