emiloimagtolis records
8 published records for vendor emiloimagtolis.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2024-37868No exploit | File Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a remote attacker to execute arbitrary code via the "emiloimagtolis · online discussion forum · CWE-434 | High8.8 | — | 1.0% | Oct 4, 2024 |
35Monitor | CVE-2024-37869No exploit | File Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a remote attacker to execute arbitrary code via the "emiloimagtolis · online discussion forum · CWE-434 | High8.8 | — | 1.0% | Oct 4, 2024 |
27Monitor | CVE-2024-7444No exploit | itsourcecode Ticket Reservation System Login Page login.php sql injectionemiloimagtolis · ticket reservation system · CWE-89 | Medium6.9 | — | 0.6% | Aug 3, 2024 |
22Monitor | CVE-2025-10033No exploit | itsourcecode Online Discussion Forum admin sql injectionemiloimagtolis · online discussion forum · CWE-74 | Medium5.5 | — | 0.4% | Sep 6, 2025 |
21Monitor | CVE-2024-5518No exploit | itsourcecode Online Discussion Forum change_profile_picture.php unrestricted uploademiloimagtolis · online discussion forum · CWE-434 | Medium5.3 | — | 0.7% | May 30, 2024 |
21Monitor | CVE-2024-52676No exploit | Itsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross Site Scripting (XSS) via /bcc_forum/members/home.php.emiloimagtolis · online discussion forum · CWE-79 | Medium5.4 | — | 0.2% | Dec 4, 2024 |
20Monitor | CVE-2024-7446No exploit | itsourcecode Ticket Reservation System list_tickets.php sql injectionemiloimagtolis · ticket reservation system · CWE-89 | Medium5.1 | — | 0.6% | Aug 3, 2024 |
20Monitor | CVE-2024-7445No exploit | itsourcecode Ticket Reservation System checkout_ticket_save.php sql injectionemiloimagtolis · ticket reservation system · CWE-89 | Medium5.1 | — | 0.5% | Aug 3, 2024 |
- CVE-2024-3786835Monitor
File Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a remote attacker to execute arbitrary code via the "
HighCVSS 8.8No exploitEPSS 1%emiloimagtolis · online discussion forumOct 4, 2024
- CVE-2024-3786935Monitor
File Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a remote attacker to execute arbitrary code via the "
HighCVSS 8.8No exploitEPSS 1%emiloimagtolis · online discussion forumOct 4, 2024
- CVE-2024-744427Monitor
itsourcecode Ticket Reservation System Login Page login.php sql injection
MediumCVSS 6.9No exploitEPSS 0%emiloimagtolis · ticket reservation systemAug 3, 2024
- CVE-2025-1003322Monitor
itsourcecode Online Discussion Forum admin sql injection
MediumCVSS 5.5No exploitEPSS 0%emiloimagtolis · online discussion forumSep 6, 2025
- CVE-2024-551821Monitor
itsourcecode Online Discussion Forum change_profile_picture.php unrestricted upload
MediumCVSS 5.3No exploitEPSS 0%emiloimagtolis · online discussion forumMay 30, 2024
- CVE-2024-5267621Monitor
Itsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross Site Scripting (XSS) via /bcc_forum/members/home.php.
MediumCVSS 5.4No exploitEPSS 0%emiloimagtolis · online discussion forumDec 4, 2024
- CVE-2024-744620Monitor
itsourcecode Ticket Reservation System list_tickets.php sql injection
MediumCVSS 5.1No exploitEPSS 0%emiloimagtolis · ticket reservation systemAug 3, 2024
- CVE-2024-744520Monitor
itsourcecode Ticket Reservation System checkout_ticket_save.php sql injection
MediumCVSS 5.1No exploitEPSS 0%emiloimagtolis · ticket reservation systemAug 3, 2024