d34dun1c02n

3 exploits Active since Apr 2023
CVE-2023-30458 NOMISEC MEDIUM WRITEUP
Medicine Tracker System - Information Disclosure
A username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a valid username due to a different response time from invalid usernames. When one enters a valid username, the response time increases depending on the length of the supplied password.
CVSS 5.3
CVE-2023-31704 NOMISEC CRITICAL WRITEUP
Oretnom23 Online Computer And Laptop Store - Incorrect Authorization
Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate privileges to the administrator's role.
CVSS 9.8
CVE-2023-31705 NOMISEC MEDIUM WRITEUP
Sourcecodester Task Reminder System 1.0 - XSS
A Reflected Cross-site scripting (XSS) vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter.
CVSS 5.4