Alon Leviev (0xDeku)

20 exploits Active since Nov 2021
CVE-2021-42667 NOMISEC CRITICAL WRITEUP
Sourcecodester Online Event Booking and Reservation System - SQL Injection in Event Management Views
A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-management/views. An attacker can leverage this vulnerability in order to manipulate the sql query performed. As a result he can extract sensitive data from the web server and in some cases he can use this vulnerability in order to get a remote code execution on the remote web server.
2 stars
CVSS 9.8
CVE-2021-42662 NOMISEC MEDIUM WORKING POC
Sourcecodester Online Event Booking and Reservation System - Stored Cross-Site Scripting via Holiday Reason Parameter
A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to cookie stealing and more.
2 stars
CVSS 5.4
CVE-2021-42670 NOMISEC CRITICAL WORKING POC
Engineers Online Portal - SQL Injection via Announcements Student ID Parameter
A SQL injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to the announcements_student.php web page. As a result a malicious user can extract sensitive data from the web server and in some cases use this vulnerability in order to get a remote code execution on the remote web server.
2 stars
CVSS 9.8
CVE-2021-42669 NOMISEC CRITICAL WORKING POC
Engineers Online Portal - Unrestricted File Upload via Teacher Avatar Change
A file upload vulnerability exists in Sourcecodester Engineers Online Portal in PHP via dashboard_teacher.php, which allows changing the avatar through teacher_avatar.php. Once an avatar gets uploaded it is getting uploaded to the /admin/uploads/ directory, and is accessible by all users. By uploading a php webshell containing "<?php system($_GET["cmd"]); ?>" the attacker can execute commands on the web server with - /admin/uploads/php-webshell?cmd=id.
2 stars
CVSS 9.8
CVE-2021-42668 NOMISEC CRITICAL WORKING POC
Engineers Online Portal - SQL Injection via id Parameter in my_classmates.php
A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter in the my_classmates.php web page.. As a result, an attacker can extract sensitive data from the web server and in some cases can use this vulnerability in order to get a remote code execution on the remote web server.
1 stars
CVSS 9.8
CVE-2021-42663 NOMISEC MEDIUM WRITEUP
Sourcecodester Online Event Booking and Reservation System - HTML Injection via msg Parameter
An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a given link he will display the content of the HTML code of the attacker's choice.
1 stars
CVSS 4.3
CVE-2021-42671 NOMISEC HIGH WRITEUP
Sourcecodester Engineers Online Portal - Auth Bypass
An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads. An attacker can leverage this vulnerability in order to bypass access controls and access all the files uploaded to the web server without the need of authentication or authorization.
1 stars
CVSS 7.5
CVE-2021-42665 NOMISEC CRITICAL WORKING POC
Engineers Online Portal - SQL Injection via Login Form
An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication.
CVSS 9.8
CVE-2021-42664 NOMISEC MEDIUM WRITEUP
Engineers Online Portal - Stored Cross-Site Scripting via Quiz Title and Description Parameters
A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the (1) Quiz title and (2) quiz description parameters to add_quiz.php. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to cookie stealing and more.
CVSS 5.4
CVE-2021-42666 NOMISEC HIGH WRITEUP
Sourcecodester Engineers Online Portal - SQL Injection via Quiz Question ID Parameter
A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to quiz_question.php, which could let a malicious user extract sensitive data from the web server and in some cases use this vulnerability in order to get a remote code execution on the remote web server.
CVSS 8.8
CVE-2021-42671 INTHEWILD HIGH WRITEUP
Sourcecodester Engineers Online Portal - Auth Bypass
An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads. An attacker can leverage this vulnerability in order to bypass access controls and access all the files uploaded to the web server without the need of authentication or authorization.
CVSS 7.5
CVE-2021-42662 INTHEWILD MEDIUM WRITEUP
Sourcecodester Online Event Booking and Reservation System - Stored Cross-Site Scripting via Holiday Reason Parameter
A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to cookie stealing and more.
CVSS 5.4
CVE-2021-42663 INTHEWILD MEDIUM WRITEUP
Sourcecodester Online Event Booking and Reservation System - HTML Injection via msg Parameter
An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a given link he will display the content of the HTML code of the attacker's choice.
CVSS 4.3
CVE-2021-42664 INTHEWILD MEDIUM WRITEUP
Engineers Online Portal - Stored Cross-Site Scripting via Quiz Title and Description Parameters
A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the (1) Quiz title and (2) quiz description parameters to add_quiz.php. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to cookie stealing and more.
CVSS 5.4
CVE-2021-42665 INTHEWILD CRITICAL WRITEUP
Engineers Online Portal - SQL Injection via Login Form
An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication.
CVSS 9.8
CVE-2021-42666 INTHEWILD HIGH WRITEUP
Sourcecodester Engineers Online Portal - SQL Injection via Quiz Question ID Parameter
A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to quiz_question.php, which could let a malicious user extract sensitive data from the web server and in some cases use this vulnerability in order to get a remote code execution on the remote web server.
CVSS 8.8
CVE-2021-42667 INTHEWILD CRITICAL WRITEUP
Sourcecodester Online Event Booking and Reservation System - SQL Injection in Event Management Views
A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-management/views. An attacker can leverage this vulnerability in order to manipulate the sql query performed. As a result he can extract sensitive data from the web server and in some cases he can use this vulnerability in order to get a remote code execution on the remote web server.
CVSS 9.8
CVE-2021-42668 INTHEWILD CRITICAL WRITEUP
Engineers Online Portal - SQL Injection via id Parameter in my_classmates.php
A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter in the my_classmates.php web page.. As a result, an attacker can extract sensitive data from the web server and in some cases can use this vulnerability in order to get a remote code execution on the remote web server.
CVSS 9.8
CVE-2021-42669 INTHEWILD CRITICAL WORKING POC
Engineers Online Portal - Unrestricted File Upload via Teacher Avatar Change
A file upload vulnerability exists in Sourcecodester Engineers Online Portal in PHP via dashboard_teacher.php, which allows changing the avatar through teacher_avatar.php. Once an avatar gets uploaded it is getting uploaded to the /admin/uploads/ directory, and is accessible by all users. By uploading a php webshell containing "<?php system($_GET["cmd"]); ?>" the attacker can execute commands on the web server with - /admin/uploads/php-webshell?cmd=id.
CVSS 9.8
CVE-2021-42670 INTHEWILD CRITICAL WRITEUP
Engineers Online Portal - SQL Injection via Announcements Student ID Parameter
A SQL injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to the announcements_student.php web page. As a result a malicious user can extract sensitive data from the web server and in some cases use this vulnerability in order to get a remote code execution on the remote web server.
CVSS 9.8