razormist records
76 published records for vendor razormist.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 1.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')30
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')16
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')9
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer8
- CWE-434 Unrestricted Upload of File with Dangerous Type4
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3
The weakness classes this vendor ships most often: where to look.
CWEAll records
76 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2020-24932No exploit | An SQL Injection vulnerability exists in Sourcecodester Complaint Management System 1.0 via the cid parameter in complaint-details.php.razormist · complaint management system · CWE-89 | Critical9.8 | — | 1.6% | Oct 27, 2021 |
39Monitor | CVE-2022-2766No exploit | SourceCodester Loan Management System index.php sql injectionrazormist · loan management system · CWE-89 | Critical9.8 | — | 1.2% | Aug 11, 2022 |
39Monitor | CVE-2022-37138No exploit | Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator afterrazormist · loan management system · CWE-89 | Critical9.8 | — | 1.2% | Sep 14, 2022 |
39Monitor | CVE-2024-2690No exploit | SourceCodester Online Discussion Forum Site uupdate.php unrestricted uploadrazormist · online discussion forum site · CWE-434 | Critical9.8 | — | 1.0% | Mar 20, 2024 |
39Monitor | CVE-2022-2666No exploit | SourceCodester Loan Management System login.php sql injectionrazormist · loan management system · CWE-89 | Critical9.8 | — | 0.9% | Jan 7, 2023 |
39Monitor | CVE-2023-5260No exploit | SourceCodester Simple Membership System group_validator.php sql injectionrazormist · simple membership system · CWE-89 | Critical9.8 | — | 0.8% | Sep 29, 2023 |
39Monitor | CVE-2023-4845No exploit | SourceCodester Simple Membership System account_edit_query.php sql injectionrazormist · simple membership system · CWE-89 | Critical9.8 | — | 0.7% | Sep 9, 2023 |
39Monitor | CVE-2024-1876No exploit | SourceCodester Employee Management System psubmit.php sql injectionrazormist · employee management system · CWE-89 | Critical9.8 | — | 0.7% | Feb 26, 2024 |
39Monitor | CVE-2024-2331No exploit | SourceCodester Tourist Reservation System System.cpp ad_writedata buffer overflowrazormist · tourist reservation system · CWE-120 | Critical9.8 | — | 0.6% | Mar 9, 2024 |
39Monitor | CVE-2024-31678No exploit | Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file.razormist · loan management system · CWE-89 | Critical9.8 | — | 0.5% | Apr 11, 2024 |
35Monitor | CVE-2022-2667No exploit | SourceCodester Loan Management System delete_lplan.php sql injectionrazormist · loan management system · CWE-89 | High8.8 | — | 0.8% | Aug 5, 2022 |
35Monitor | CVE-2024-1875No exploit | SourceCodester Complaint Management System Lodge Complaint Section register-complaint.php unrestricted uploadrazormist · complaint management system · CWE-434 | High8.8 | — | 0.8% | Feb 26, 2024 |
35Monitor | CVE-2023-3152No exploit | SourceCodester Online Discussion Forum Site view_post.php sql injectionrazormist · online discussion forum site · CWE-89 | High8.8 | — | 0.8% | Jun 7, 2023 |
35Monitor | CVE-2023-3149No exploit | SourceCodester Online Discussion Forum Site manage_user.php sql injectionrazormist · online discussion forum site · CWE-89 | High8.8 | — | 0.8% | Jun 7, 2023 |
35Monitor | CVE-2023-3145No exploit | SourceCodester Online Discussion Forum Site sql injectionrazormist · online discussion forum site · CWE-89 | High8.8 | — | 0.7% | Jun 7, 2023 |
35Monitor | CVE-2023-3151No exploit | SourceCodester Online Discussion Forum Site manage_user.php sql injectionrazormist · online discussion forum site · CWE-89 | High8.8 | — | 0.7% | Jun 7, 2023 |
35Monitor | CVE-2023-3148No exploit | SourceCodester Online Discussion Forum Site manage_post.php sql injectionrazormist · online discussion forum site · CWE-89 | High8.8 | — | 0.7% | Jun 7, 2023 |
35Monitor | CVE-2023-3147No exploit | SourceCodester Online Discussion Forum Site view_category.php sql injectionrazormist · online discussion forum site · CWE-89 | High8.8 | — | 0.7% | Jun 7, 2023 |
35Monitor | CVE-2023-3150No exploit | SourceCodester Online Discussion Forum Site manage_post.php sql injectionrazormist · online discussion forum site · CWE-89 | High8.8 | — | 0.7% | Jun 7, 2023 |
35Monitor | CVE-2023-3146No exploit | SourceCodester Online Discussion Forum Site manage_category.php sql injectionrazormist · online discussion forum site · CWE-89 | High8.8 | — | 0.7% | Jun 7, 2023 |
35Monitor | CVE-2024-1878No exploit | SourceCodester Employee Management System myprofile.php sql injectionrazormist · employee management system · CWE-89 | High8.8 | — | 0.6% | Feb 26, 2024 |
35Monitor | CVE-2024-1877No exploit | SourceCodester Employee Management System cancel.php sql injectionrazormist · employee management system · CWE-89 | High8.8 | — | 0.6% | Feb 26, 2024 |
30Monitor | CVE-2022-31295Proof of concept | An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts.razormist · online discussion forum site · CWE-639 | High7.5 | — | 1.4% | Jun 16, 2022 |
30Monitor | CVE-2023-5027No exploit | SourceCodester Simple Membership System club_validator.php sql injectionrazormist · simple membership system · CWE-89 | High7.5 | — | 0.6% | Sep 17, 2023 |
30Monitor | CVE-2023-4846No exploit | SourceCodester Simple Membership System delete_member.php sql injectionrazormist · simple membership system · CWE-89 | High7.5 | — | 0.6% | Sep 9, 2023 |
- CVE-2020-2493239Monitor
An SQL Injection vulnerability exists in Sourcecodester Complaint Management System 1.0 via the cid parameter in complaint-details.php.
CriticalCVSS 9.8No exploitEPSS 1%razormist · complaint management systemOct 27, 2021
- CVE-2022-276639Monitor
SourceCodester Loan Management System index.php sql injection
CriticalCVSS 9.8No exploitEPSS 1%razormist · loan management systemAug 11, 2022
- CVE-2022-3713839Monitor
Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator after
CriticalCVSS 9.8No exploitEPSS 1%razormist · loan management systemSep 14, 2022
- CVE-2024-269039Monitor
SourceCodester Online Discussion Forum Site uupdate.php unrestricted upload
CriticalCVSS 9.8No exploitEPSS 1%razormist · online discussion forum siteMar 20, 2024
- CVE-2022-266639Monitor
SourceCodester Loan Management System login.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%razormist · loan management systemJan 7, 2023
- CVE-2023-526039Monitor
SourceCodester Simple Membership System group_validator.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%razormist · simple membership systemSep 29, 2023
- CVE-2023-484539Monitor
SourceCodester Simple Membership System account_edit_query.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%razormist · simple membership systemSep 9, 2023
- CVE-2024-187639Monitor
SourceCodester Employee Management System psubmit.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%razormist · employee management systemFeb 26, 2024
- CVE-2024-233139Monitor
SourceCodester Tourist Reservation System System.cpp ad_writedata buffer overflow
CriticalCVSS 9.8No exploitEPSS 0%razormist · tourist reservation systemMar 9, 2024
- CVE-2024-3167839Monitor
Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file.
CriticalCVSS 9.8No exploitEPSS 0%razormist · loan management systemApr 11, 2024
- CVE-2022-266735Monitor
SourceCodester Loan Management System delete_lplan.php sql injection
HighCVSS 8.8No exploitEPSS 0%razormist · loan management systemAug 5, 2022
- CVE-2024-187535Monitor
SourceCodester Complaint Management System Lodge Complaint Section register-complaint.php unrestricted upload
HighCVSS 8.8No exploitEPSS 0%razormist · complaint management systemFeb 26, 2024
- CVE-2023-315235Monitor
SourceCodester Online Discussion Forum Site view_post.php sql injection
HighCVSS 8.8No exploitEPSS 0%razormist · online discussion forum siteJun 7, 2023
- CVE-2023-314935Monitor
SourceCodester Online Discussion Forum Site manage_user.php sql injection
HighCVSS 8.8No exploitEPSS 0%razormist · online discussion forum siteJun 7, 2023
- CVE-2023-314535Monitor
SourceCodester Online Discussion Forum Site sql injection
HighCVSS 8.8No exploitEPSS 0%razormist · online discussion forum siteJun 7, 2023
- CVE-2023-315135Monitor
SourceCodester Online Discussion Forum Site manage_user.php sql injection
HighCVSS 8.8No exploitEPSS 0%razormist · online discussion forum siteJun 7, 2023
- CVE-2023-314835Monitor
SourceCodester Online Discussion Forum Site manage_post.php sql injection
HighCVSS 8.8No exploitEPSS 0%razormist · online discussion forum siteJun 7, 2023
- CVE-2023-314735Monitor
SourceCodester Online Discussion Forum Site view_category.php sql injection
HighCVSS 8.8No exploitEPSS 0%razormist · online discussion forum siteJun 7, 2023
- CVE-2023-315035Monitor
SourceCodester Online Discussion Forum Site manage_post.php sql injection
HighCVSS 8.8No exploitEPSS 0%razormist · online discussion forum siteJun 7, 2023
- CVE-2023-314635Monitor
SourceCodester Online Discussion Forum Site manage_category.php sql injection
HighCVSS 8.8No exploitEPSS 0%razormist · online discussion forum siteJun 7, 2023
- CVE-2024-187835Monitor
SourceCodester Employee Management System myprofile.php sql injection
HighCVSS 8.8No exploitEPSS 0%razormist · employee management systemFeb 26, 2024
- CVE-2024-187735Monitor
SourceCodester Employee Management System cancel.php sql injection
HighCVSS 8.8No exploitEPSS 0%razormist · employee management systemFeb 26, 2024
- CVE-2022-3129530Monitor
An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts.
HighCVSS 7.5Proof of conceptEPSS 1%razormist · online discussion forum siteJun 16, 2022
- CVE-2023-502730Monitor
SourceCodester Simple Membership System club_validator.php sql injection
HighCVSS 7.5No exploitEPSS 0%razormist · simple membership systemSep 17, 2023
- CVE-2023-484630Monitor
SourceCodester Simple Membership System delete_member.php sql injection
HighCVSS 7.5No exploitEPSS 0%razormist · simple membership systemSep 9, 2023