Skip to content
Noroxi

oretnom23 records

761 published records for vendor oretnom23.

Researcher profile

Entered KEV
0 · 0%
Weaponized
2 · 0.3%
Pre-auth RCE
46
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 23
  4. 24
  5. 25
  6. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

761 records
  • CVE-2022-40471
    46Plan

    Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture uploa

    CriticalCVSS 9.8WeaponizedEPSS 22%

    oretnom23 · clinic\'s patient management systemOct 31, 2022

  • CVE-2024-0264
    44Plan

    SourceCodester Clinic Queuing System LoginRegistration.php authorization

    CriticalCVSS 9.8No exploitEPSS 18%

    oretnom23 · clinic queuing systemJan 7, 2024

  • CVE-2021-42580
    42Plan

    Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file (/admin/login.php) and au

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    oretnom23 · online learning systemNov 15, 2021

  • CVE-2024-0265
    41Plan

    SourceCodester Clinic Queuing System GET Parameter index.php file inclusion

    HighCVSS 8.8No exploitEPSS 21%

    oretnom23 · clinic queuing systemJan 7, 2024

  • CVE-2021-44653
    41Plan

    Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability.

    CriticalCVSS 9.8Proof of conceptEPSS 6%

    oretnom23 · online magazine management systemDec 15, 2021

  • CVE-2021-43140
    40Plan

    SQL Injection vulnerability exists in Sourcecodester.

    CriticalCVSS 9.8Proof of conceptEPSS 5%

    oretnom23 · simple subscription websiteNov 3, 2021

  • CVE-2023-1826
    40Plan

    SourceCodester Online Computer and Laptop Store index.php unrestricted upload

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    oretnom23 · online computer and laptop storeApr 4, 2023

  • CVE-2023-33592
    40Plan

    Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=syste

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    oretnom23 · lost and found information systemJun 28, 2023

  • CVE-2023-34581
    40Plan

    Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    oretnom23 · service provider management systemJun 12, 2023

  • CVE-2021-40247
    40Plan

    SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQL c

    CriticalCVSS 9.8No exploitEPSS 3%

    oretnom23 · budget and expense tracker systemJan 21, 2022

  • CVE-2022-26645
    40Plan

    A remote code execution (RCE) vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted P

    CriticalCVSS 9.8No exploitEPSS 3%

    oretnom23 · banking systemMar 30, 2022

  • CVE-2021-41644
    40Plan

    Remote Code Exection (RCE) vulnerability exists in Sourcecodester Online Food Ordering System 2.0 via a maliciously crafted PHP file that by

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    oretnom23 · online food ordering systemOct 29, 2021

  • CVE-2024-34833
    40Plan

    Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload.

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    oretnom23 · payroll management systemJun 17, 2024

  • CVE-2022-26283
    39Monitor

    Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the view_plan endpoint.

    CriticalCVSS 9.8No exploitEPSS 2%

    oretnom23 · simple subscription websiteMar 21, 2022

  • CVE-2021-46200
    39Monitor

    An SQL Injection vulnerability exists in Sourcecodester Simple Music Clour Community System 1.0 via the email parameter in /music/ajax.php.

    CriticalCVSS 9.8No exploitEPSS 2%

    oretnom23 · simple music cloud community systemJan 21, 2022

  • CVE-2021-46309
    39Monitor

    An SQL Injection vulnerability exists in Sourcecodester Employee and Visitor Gate Pass Logging System 1.0 via the username parameter.

    CriticalCVSS 9.8No exploitEPSS 2%

    oretnom23 · employee and visitor gate pass logging systemJan 21, 2022

  • CVE-2023-31857
    39Monitor

    Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution.

    CriticalCVSS 9.8No exploitEPSS 2%

    oretnom23 · online computer and laptop storeMay 16, 2023

  • CVE-2022-36270
    39Monitor

    Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    oretnom23 · clinic\'s patient management systemAug 10, 2022

  • CVE-2023-43457
    39Monitor

    An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in the /php-spms/admin

    CriticalCVSS 9.8No exploitEPSS 1%

    oretnom23 · service provider management systemSep 25, 2023

  • CVE-2024-3376
    39Monitor

    SourceCodester Computer Laboratory Management System config.php redirect

    CriticalCVSS 9.8No exploitEPSS 1%

    oretnom23 · computer laboratory management systemApr 6, 2024

  • CVE-2023-31704
    39Monitor

    Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate priv

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    oretnom23 · online computer and laptop storeJul 13, 2023

  • CVE-2022-27304
    39Monitor

    Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter.

    CriticalCVSS 9.8No exploitEPSS 1%

    oretnom23 · student grading systemApr 5, 2022

  • CVE-2023-38965
    39Monitor

    Lost and Found Information System 1.0 allows account takeover via username and password to a /classes/Users.php?f=save URI.

    CriticalCVSS 9.8No exploitEPSS 1%

    oretnom23 · lost and found information systemNov 3, 2023

  • CVE-2022-29650
    39Monitor

    Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food

    CriticalCVSS 9.8No exploitEPSS 1%

    oretnom23 · online food ordering systemMay 25, 2022

  • CVE-2021-41659
    39Monitor

    SQL injection vulnerability in Sourcecodester Banking System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the use

    CriticalCVSS 9.8No exploitEPSS 1%

    oretnom23 · banking systemJan 24, 2022