Burak Sevben

64 exploits Active since Jan 2024
CVE-2024-5066 WRITEUP MEDIUM WRITEUP
PHPGurukul Online Course Registration System 3.1 - SQL Injection via Pincode Parameter
A vulnerability classified as critical was found in PHPGurukul Online Course Registration System 3.1. Affected by this vulnerability is an unknown functionality of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-264925 was assigned to this vulnerability.
CVSS 6.3
CVE-2024-5093 WRITEUP HIGH WRITEUP
Best House Rental Management System 1.0 - SQL Injection via login.php Username/Password Parameters
A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265072.
CVSS 7.3
CVE-2024-5094 WRITEUP HIGH WRITEUP
Best House Rental Management System 1.0 - SQL Injection via view_payment.php id Parameter
A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This issue affects some unknown processing of the file view_payment.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265073 was assigned to this vulnerability.
CVSS 7.3
CVE-2024-5117 WRITEUP HIGH WRITEUP
SourceCodester Event Registration System 1.0 - SQL Injection
A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. This affects an unknown part of the file portal.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265197 was assigned to this vulnerability.
CVSS 7.3
CVE-2024-5118 WRITEUP HIGH WRITEUP
SourceCodester Event Registration System 1.0 - SQL Injection
A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-265198 is the identifier assigned to this vulnerability.
CVSS 7.3
CVE-2024-5119 WRITEUP MEDIUM WRITEUP
SourceCodester Event Registration System 1.0 - SQL Injection
A vulnerability was found in SourceCodester Event Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php?f=load_registration. The manipulation of the argument last_id/event_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265199.
CVSS 6.3
CVE-2024-5120 WRITEUP MEDIUM WRITEUP
SourceCodester Event Registration System 1.0 - SQL Injection
A vulnerability was found in SourceCodester Event Registration System 1.0. It has been classified as critical. Affected is an unknown function of the file /registrar/?page=registration. The manipulation of the argument e leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265200.
CVSS 6.3
CVE-2024-5121 WRITEUP LOW WRITEUP
SourceCodester Event Registration System 1.0 - XSS
A vulnerability was found in SourceCodester Event Registration System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /registrar/?page=registration. The manipulation of the argument e leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265201 was assigned to this vulnerability.
CVSS 3.5
CVE-2024-5122 WRITEUP HIGH WRITEUP
SourceCodester Event Registration System 1.0 - SQL Injection
A vulnerability was found in SourceCodester Event Registration System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /registrar/. The manipulation of the argument search leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-265202 is the identifier assigned to this vulnerability.
CVSS 7.3
CVE-2024-5123 WRITEUP MEDIUM WRITEUP
SourceCodester Event Registration System 1.0 - XSS
A vulnerability classified as problematic has been found in SourceCodester Event Registration System 1.0. This affects an unknown part of the file /registrar/. The manipulation of the argument searchbar leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265203.
CVSS 4.3
CVE-2024-5134 WRITEUP MEDIUM WRITEUP
SourceCodester Electricity Consumption Monitoring Tool 1.0 - SQL In...
A vulnerability was found in SourceCodester Electricity Consumption Monitoring Tool 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-bill.php. The manipulation of the argument bill leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-265210 is the identifier assigned to this vulnerability.
CVSS 6.3
CVE-2024-5135 WRITEUP HIGH WRITEUP
PHPGurukul Directory Management System 1.0 - SQL Injection
A vulnerability was found in PHPGurukul Directory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265211.
CVSS 7.3
CVE-2024-5136 WRITEUP LOW WRITEUP
PHPGurukul Directory Management System 1.0 - XSS
A vulnerability classified as problematic has been found in PHPGurukul Directory Management System 1.0. Affected is an unknown function of the file /admin/search-directory.php.. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265212.
CVSS 2.4
CVE-2024-5137 WRITEUP LOW WRITEUP
PHPGurukul Directory Management System 1.0 - XSS
A vulnerability classified as problematic was found in PHPGurukul Directory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php of the component Searchbar. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265213 was assigned to this vulnerability.
CVSS 2.4