Rezultati pretraživanja za 'Proizvođač: young_entrepreneur_e-negosyo_system_project'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2024-33978 | 6.1 | Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via 'category' parameter in '/index.php'. | 2024-08-15 16:54:57 | 2024-08-06 11:16:06 |
| CVE-2024-33977 | 6.1 | Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via 'view' parameter in /admin/orders/index.php'. | 2024-08-15 16:53:04 | 2024-08-06 11:16:05 |
| CVE-2024-33976 | 6.1 | Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session | 2024-08-15 16:51:02 | 2024-08-06 11:16:05 |
| CVE-2024-33975 | 6.1 | Cross-Site Scripting (XSS) vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session | 2024-08-15 16:50:35 | 2024-08-06 11:16:05 |
| CVE-2024-33958 | 7.5 | SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'phonenumber' in '/passwordrecover.php' | 2024-08-15 16:49:23 | 2024-08-06 11:16:04 |
| CVE-2024-33957 | 7.5 | SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'id' in '/admin/orders/controller.php' p | 2024-08-15 16:47:12 | 2024-08-06 11:16:04 |
| CVE-2023-1738 | 9.8 | A vulnerability has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0 and classified as critical. This vulnerability affects unknown code of the file index.php?q=product. The manipulation of the argument search leads to sql injecti | 2023-11-07 04:04:00 | 2023-03-30 21:15:00 |
| CVE-2023-1737 | 9.8 | A vulnerability, which was classified as critical, was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument U_USERNAME leads to sql injection. It is poss | 2023-11-07 04:04:00 | 2023-03-30 20:15:00 |
| CVE-2023-1736 | 8.8 | A vulnerability, which was classified as critical, has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by this issue is some unknown functionality of the file cart/controller.php?action=add. The manipulation of the argu | 2023-11-07 04:04:00 | 2023-03-30 20:15:00 |
| CVE-2023-1735 | 9.8 | A vulnerability classified as critical was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by this vulnerability is an unknown functionality of the file passwordrecover.php. The manipulation of the argument phonenumber leads | 2023-11-07 04:04:00 | 2023-03-30 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/2
Zapisa po stranici: