hlhyp

3 exploits Active since Dec 2023
CVE-2023-6462 WRITEUP LOW WRITEUP
SourceCodester User Registration and Login System 1.0 - XSS
A vulnerability, which was classified as problematic, was found in SourceCodester User Registration and Login System 1.0. Affected is an unknown function of the file /endpoint/delete-user.php. The manipulation of the argument user leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-246612.
CVSS 3.5
CVE-2023-6463 WRITEUP LOW WRITEUP
SourceCodester User Registration and Login System 1.0 - XSS
A vulnerability has been found in SourceCodester User Registration and Login System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument first_name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-246613 was assigned to this vulnerability.
CVSS 3.5
CVE-2023-6464 WRITEUP MEDIUM WRITEUP
SourceCodester User Registration and Login System 1.0 - SQL Injection
A vulnerability was found in SourceCodester User Registration and Login System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument user leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-246614 is the identifier assigned to this vulnerability.
CVSS 6.3