Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2023-1502 | SourceCodester Alphaware Simple E-Commerce System 1.0 edit_customer.php firstname/mi/lastname sql injection


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file function/edit_customer.php. The manipulation of the argument firstname/mi/lastname with the input a' RLIKE SLEEP(5) AND 'dAbu'='dAbu leads to sql injection. This vulnerability is handled as CVE-2023-1502. The attack may be launched remotely. Furthermore, there is an exploit available. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ SourceCodester Online Shopping Alphaware 1.0 /alphaware/details.php id sql injection


📈 66.69 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-6807 | SourceCodester Student Study Center Desk Management System 1.0 HTTP POST Request Users.php firstname/middlename/lastname/username cross site scripting


📈 63.78 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-0504 | code-projects Simple Online Hotel Reservation System 1.0 Make a Reservation Page add_reserve.php Firstname/Lastname cross site scripting


📈 60.94 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-34224 | Computer Laboratory Management System 1.0 Users.php firstname/middlename/lastname cross site scripting


📈 53.35 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-40114 | Online Banking System 1.0 edit_customer.php cust_id sql injection (ID 16)


📈 52.17 Punkte
🕵️ Sicherheitslücken

🕵️ CreatiWity wityCMS 0.6.2 Search for User Discovery /admin/user/users Nickname/email/firstname/lastname/groupe sql injection


📈 51.68 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-43097 | Phpgurukul User Registration & User Management System 3.0 Form/Login Page firstname/lastname cross site scripting


📈 49.86 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2016-1912 | Dolibarr ERP/CRM 3.8.3 htdocs/user/card.php lastname/firstname/email/job/signature cross site scripting (ID 135201)


📈 48.95 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-0181 | RRJ Nueva Ecija Engineer Online Portal 1.0 Admin Panel /admin/admin_user.php Firstname/Lastname/Username cross site scripting


📈 48.95 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-0184 | RRJ Nueva Ecija Engineer Online Portal 1.0 Add Enginer /admin/edit_teacher.php Firstname/Lastname cross site scripting


📈 48.95 Punkte
🕵️ Sicherheitslücken

🕵️ Dolibarr ERP/CRM 3.8.3 htdocs/user/card.php lastname/firstname/email/job/signature Cross Site Scripting


📈 47.8 Punkte
🕵️ Sicherheitslücken

🕵️ Dolibarr ERP/CRM 3.8.3 htdocs/user/card.php lastname/firstname/email/job/signature Cross Site Scripting


📈 47.8 Punkte
🕵️ Sicherheitslücken

🕵️ PHP Scripts Mall Auditor Website 2.0.1 lastname/firstname Cross Site Scripting


📈 47.8 Punkte
🕵️ Sicherheitslücken

🕵️ PHP Scripts Mall Car Rental Script 2.0.8 FirstName/LastName cross site scripting


📈 47.8 Punkte
🕵️ Sicherheitslücken

🕵️ PHP Scripts Mall Auditor Website 2.0.1 lastname/firstname cross site scripting


📈 47.8 Punkte
🕵️ Sicherheitslücken

🕵️ PHP Scripts Mall Entrepreneur B2B Script 3.0.6 Account Settings FirstName/LastName Stored cross site scripting


📈 47.8 Punkte
🕵️ Sicherheitslücken

🕵️ xloadimage 4.1 FACES Image Firstname/Lastname memory corruption


📈 44.32 Punkte
🕵️ Sicherheitslücken

🕵️ Mail.ru: HTTP-Response-Splitting leads to information disclosure (email, firstname, lastname) at https://tz.mail.ru


📈 44.32 Punkte
🕵️ Sicherheitslücken

🕵️ EspoCRM up to 5.6.5 Create User firstName/lastName Stored cross site scripting


📈 44.32 Punkte
🕵️ Sicherheitslücken

🕵️ EspoCRM up to 5.6.5 Create Case firstName/lastName Stored cross site scripting


📈 44.32 Punkte
🕵️ Sicherheitslücken

🕵️ Global RADAR BSA Radar up to 1.6.7234.24750 Update User Profile Firstname/Lastname Stored cross site scripting


📈 44.32 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-7812 | SourceCodester Best House Rental Management System 1.0 POST Parameter ajax.php lastname cross site scripting


📈 42.16 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-7812 | SourceCodester Best House Rental Management System 1.0 POST Parameter ajax.php lastname cross site scripting


📈 42.16 Punkte
🕵️ Sicherheitslücken

🕵️ Sourcecodester Online Shopping Alphaware 1.0 Parameter sql injection


📈 40.5 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-3537 | Campcodes Church Management System 1.0 /admin/admin_user.php firstname sql injection


📈 38.01 Punkte
🕵️ Sicherheitslücken

🕵️ Doctor Appointment System 1.0 contactus.php lastname sql injection


📈 37.95 Punkte
🕵️ Sicherheitslücken

🕵️ Doctor Appointment System 1.0 contactus.php firstname sql injection


📈 36.86 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-2145 | SourceCodester Online Mobile Management Store 1.0 update-tracker.php firstname cross site scripting


📈 36.68 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2490 | SourceCodester Simple E-Learning System 1.0 search.php classCode sql injection


📈 34.42 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2489 | SourceCodester Simple E-Learning System 1.0 classRoom.php classCode sql injection


📈 34.42 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2665 | SourceCodester Simple E-Learning System classroom.php post_id sql injection


📈 34.42 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2697 | SourceCodester Simple E-Learning System comment_frame.php post_id sql injection


📈 34.42 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2705 | SourceCodester Simple Student Information System manage_department.php id sql injection


📈 34.42 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2698 | SourceCodester Simple E-Learning System search.php searchPost sql injection


📈 34.42 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-2722 | SourceCodester Simple Student Information System manage_course.php id sql injection


📈 34.42 Punkte
🕵️ Sicherheitslücken

matomo
•