CVE Database and Vulnerability Search

Browse vendorsBrowse ecosystems

Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.

Vulnerabilities
381,134
with PoCs
37,247
CISA KEV
1,665
Ransomware
606
with Nuclei
4,342
Advanced

Showing 16 vulnerabilities on this page

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

SourceCodester Computer Laboratory Management System Master.php delete_category sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function delete_category of the file /classes/Master.php?f=delete_category. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CWE-89Aug 30, 2024
CVSS5.3v4.0EPSS0.59%PoCs0SignalsSTIX

SourceCodester Computer Laboratory Management System Master.php delete_record sql injection

A vulnerability classified as critical was found in SourceCodester Computer Laboratory Management System 1.0. Affected by this vulnerability is the function delete_record of the file /classes/Master.php?f=delete_record. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CWE-89Aug 30, 2024
CVSS5.3v4.0EPSS0.59%PoCs0SignalsSTIX

SourceCodester Computer Laboratory Management System SystemSettings.php update_settings_info sql injection

A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. Affected is the function update_settings_info of the file /classes/SystemSettings.php?f=update_settings. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CWE-89Aug 30, 2024
CVSS5.3v4.0EPSS0.59%PoCs0SignalsSTIX

Incorrect access control in the delete_category function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with low-level privileges to arbitrarily delete categories.

CWE-284Aug 9, 2024
CVSS6.5v3.1EPSS0.599%PoCs0SignalsSTIX

SourceCodester Computer Laboratory Management System 1.0 allows admin/category/view_category.php id SQL Injection.

CWE-89Aug 7, 2024
CVSS9.8v3.1EPSS0.599%PoCs0SignalsSTIX

SourceCodester Computer Laboratory Management System 1.0 allows classes/Master.php id SQL Injection.

CWE-89Aug 7, 2024
CVSS9.8v3.1EPSS0.698%PoCs0SignalsSTIX

SourceCodester Computer Laboratory Management System Master.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Computer Laboratory Management System 1.0. Affected is an unknown function of the file /lms/classes/Master.php?f=save_record. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CWE-89Jul 17, 2024
CVSS5.3v4.0EPSS9.08%PoCs0SignalsSTIX

A Cross Site Scripting (XSS) vulnerability exists in Computer Laboratory Management System version 1.0. This vulnerability allows a remote attacker to execute arbitrary code via the Borrower Name, Department, and Remarks parameters.

CWE-79Jun 20, 2024
CVSS6.1v3.1EPSS0.476%PoCs0SignalsSTIX

Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, middlename, lastname parameters.

CWE-79May 13, 2024
CVSS7.3v3.1EPSS0.871%PoCs1SignalsSTIX

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manage_user&id=6.

CWE-89Apr 22, 2024
CVSS9.4v3.1EPSS0.606%PoCs0SignalsSTIX

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/damage/view_damage.php.

CWE-89Apr 19, 2024
CVSS9.8v3.1EPSS0.733%PoCs0SignalsSTIX

SourceCodester Computer Laboratory Management System Users.php cross site scripting

A vulnerability has been found in SourceCodester Computer Laboratory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-260482 is the identifier assigned to this vulnerability.

CWE-79Apr 12, 2024
CVSS3.5v3.1EPSS0.605%PoCs0SignalsSTIX

SourceCodester Computer Laboratory Management System config.php redirect

A vulnerability classified as critical has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part of the file config.php. The manipulation of the argument url leads to execution after redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259497 was assigned to this vulnerability.

CWE-670CWE-698Apr 6, 2024
CVSS7.3v3.1EPSS1.34%PoCs0SignalsSTIX

SourceCodester Computer Laboratory Management System user.php sql injection

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file classes/user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-259386 is the identifier assigned to this vulnerability.

CWE-89Apr 4, 2024
CVSS6.3v3.1EPSS0.716%PoCs0SignalsSTIX

SourceCodester Computer Laboratory Management System cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part of the file /classes/Users.php?f=save. The manipulation of the argument middlename leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-258915.

CWE-79Apr 1, 2024
CVSS3.5v3.1EPSS0.554%PoCs0SignalsSTIX

SourceCodester Computer Laboratory Management System save_users improper authorization

A vulnerability, which was classified as critical, has been found in SourceCodester Computer Laboratory Management System 1.0. Affected by this issue is the function save_users of the file /classes/Users.php?f=save. The manipulation of the argument id leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-258914 is the identifier assigned to this vulnerability.

CWE-285CWE-639Apr 1, 2024
CVSS5.4v3.1EPSS0.487%PoCs0SignalsSTIX