d34dun1c02n

3 exploits Active since Apr 2023
CVE-2023-30458 NOMISEC MEDIUM WRITEUP
Medicine Tracker System 1.0 - Username Enumeration via Login Response Time Discrepancy
A username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a valid username due to a different response time from invalid usernames. When one enters a valid username, the response time increases depending on the length of the supplied password.
CVSS 5.3
CVE-2023-31704 NOMISEC CRITICAL WRITEUP
Sourcecodester Online Computer and Laptop Store 1.0 - Incorrect Authorization
Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate privileges to the administrator's role.
CVSS 9.8
CVE-2023-31705 NOMISEC MEDIUM WRITEUP
Sourcecodester Task Reminder System 1.0 - XSS
A Reflected Cross-site scripting (XSS) vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter.
CVSS 5.4