razormist kayıtları

razormist üreticisine ait 76 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %1,3
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')30
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')16
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')9
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer8
CWE-434 Unrestricted Upload of File with Dangerous Type4
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

76 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2020-24932İstismar yok	An SQL Injection vulnerability exists in Sourcecodester Complaint Management System 1.0 via the cid parameter in complaint-details.php.razormist · complaint management system · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%1,6	27 Eki 2021
39İzleyin	CVE-2022-2766İstismar yok	SourceCodester Loan Management System index.php sql injectionrazormist · loan management system · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%1,2	11 Ağu 2022
39İzleyin	CVE-2022-37138İstismar yok	Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator afterrazormist · loan management system · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%1,2	14 Eyl 2022
39İzleyin	CVE-2024-2690İstismar yok	SourceCodester Online Discussion Forum Site uupdate.php unrestricted uploadrazormist · online discussion forum site · CWE-434 Kimlik doğrulamasız Dosya yükleme	Kritik9,8	—	%1,0	20 Mar 2024
39İzleyin	CVE-2022-2666İstismar yok	SourceCodester Loan Management System login.php sql injectionrazormist · loan management system · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,9	7 Oca 2023
39İzleyin	CVE-2023-5260İstismar yok	SourceCodester Simple Membership System group_validator.php sql injectionrazormist · simple membership system · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,8	29 Eyl 2023
39İzleyin	CVE-2023-4845İstismar yok	SourceCodester Simple Membership System account_edit_query.php sql injectionrazormist · simple membership system · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,7	9 Eyl 2023
39İzleyin	CVE-2024-1876İstismar yok	SourceCodester Employee Management System psubmit.php sql injectionrazormist · employee management system · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,7	26 Şub 2024
39İzleyin	CVE-2024-2331İstismar yok	SourceCodester Tourist Reservation System System.cpp ad_writedata buffer overflowrazormist · tourist reservation system · CWE-120 Kimlik doğrulamasız Bellek hatası	Kritik9,8	—	%0,6	9 Mar 2024
39İzleyin	CVE-2024-31678İstismar yok	Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file.razormist · loan management system · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Kritik9,8	—	%0,6	11 Nis 2024
35İzleyin	CVE-2022-2667İstismar yok	SourceCodester Loan Management System delete_lplan.php sql injectionrazormist · loan management system · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,9	5 Ağu 2022
35İzleyin	CVE-2024-1875İstismar yok	SourceCodester Complaint Management System Lodge Complaint Section register-complaint.php unrestricted uploadrazormist · complaint management system · CWE-434 Dosya yükleme	Yüksek8,8	—	%0,9	26 Şub 2024
35İzleyin	CVE-2023-3152İstismar yok	SourceCodester Online Discussion Forum Site view_post.php sql injectionrazormist · online discussion forum site · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,8	7 Haz 2023
35İzleyin	CVE-2023-3149İstismar yok	SourceCodester Online Discussion Forum Site manage_user.php sql injectionrazormist · online discussion forum site · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,8	7 Haz 2023
35İzleyin	CVE-2023-3145İstismar yok	SourceCodester Online Discussion Forum Site sql injectionrazormist · online discussion forum site · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,8	7 Haz 2023
35İzleyin	CVE-2023-3151İstismar yok	SourceCodester Online Discussion Forum Site manage_user.php sql injectionrazormist · online discussion forum site · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,8	7 Haz 2023
35İzleyin	CVE-2023-3148İstismar yok	SourceCodester Online Discussion Forum Site manage_post.php sql injectionrazormist · online discussion forum site · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,8	7 Haz 2023
35İzleyin	CVE-2023-3147İstismar yok	SourceCodester Online Discussion Forum Site view_category.php sql injectionrazormist · online discussion forum site · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,8	7 Haz 2023
35İzleyin	CVE-2023-3150İstismar yok	SourceCodester Online Discussion Forum Site manage_post.php sql injectionrazormist · online discussion forum site · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,8	7 Haz 2023
35İzleyin	CVE-2023-3146İstismar yok	SourceCodester Online Discussion Forum Site manage_category.php sql injectionrazormist · online discussion forum site · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,8	7 Haz 2023
35İzleyin	CVE-2024-1878İstismar yok	SourceCodester Employee Management System myprofile.php sql injectionrazormist · employee management system · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,6	26 Şub 2024
35İzleyin	CVE-2024-1877İstismar yok	SourceCodester Employee Management System cancel.php sql injectionrazormist · employee management system · CWE-89 SQL enjeksiyonu	Yüksek8,8	—	%0,6	26 Şub 2024
30İzleyin	CVE-2022-31295Kavram kanıtı	An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts.razormist · online discussion forum site · CWE-639 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek7,5	—	%1,4	16 Haz 2022
30İzleyin	CVE-2023-5027İstismar yok	SourceCodester Simple Membership System club_validator.php sql injectionrazormist · simple membership system · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek7,5	—	%0,6	17 Eyl 2023
30İzleyin	CVE-2023-4846İstismar yok	SourceCodester Simple Membership System delete_member.php sql injectionrazormist · simple membership system · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek7,5	—	%0,6	9 Eyl 2023

CVE-2020-24932
39İzleyin
An SQL Injection vulnerability exists in Sourcecodester Complaint Management System 1.0 via the cid parameter in complaint-details.php.
KritikCVSS 9,8İstismar yokEPSS %2
- Kimlik doğrulamasız
- SQL enjeksiyonu
razormist · complaint management system27 Eki 2021
CVE-2022-2766
39İzleyin
SourceCodester Loan Management System index.php sql injection
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
razormist · loan management system11 Ağu 2022
CVE-2022-37138
39İzleyin
Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator after
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
razormist · loan management system14 Eyl 2022
CVE-2024-2690
39İzleyin
SourceCodester Online Discussion Forum Site uupdate.php unrestricted upload
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Dosya yükleme
razormist · online discussion forum site20 Mar 2024
CVE-2022-2666
39İzleyin
SourceCodester Loan Management System login.php sql injection
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
razormist · loan management system7 Oca 2023
CVE-2023-5260
39İzleyin
SourceCodester Simple Membership System group_validator.php sql injection
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
razormist · simple membership system29 Eyl 2023
CVE-2023-4845
39İzleyin
SourceCodester Simple Membership System account_edit_query.php sql injection
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
razormist · simple membership system9 Eyl 2023
CVE-2024-1876
39İzleyin
SourceCodester Employee Management System psubmit.php sql injection
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
razormist · employee management system26 Şub 2024
CVE-2024-2331
39İzleyin
SourceCodester Tourist Reservation System System.cpp ad_writedata buffer overflow
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Bellek hatası
razormist · tourist reservation system9 Mar 2024
CVE-2024-31678
39İzleyin
Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file.
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
razormist · loan management system11 Nis 2024
CVE-2022-2667
35İzleyin
SourceCodester Loan Management System delete_lplan.php sql injection
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
razormist · loan management system5 Ağu 2022
CVE-2024-1875
35İzleyin
SourceCodester Complaint Management System Lodge Complaint Section register-complaint.php unrestricted upload
YüksekCVSS 8,8İstismar yokEPSS %1
- Dosya yükleme
razormist · complaint management system26 Şub 2024
CVE-2023-3152
35İzleyin
SourceCodester Online Discussion Forum Site view_post.php sql injection
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
razormist · online discussion forum site7 Haz 2023
CVE-2023-3149
35İzleyin
SourceCodester Online Discussion Forum Site manage_user.php sql injection
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
razormist · online discussion forum site7 Haz 2023
CVE-2023-3145
35İzleyin
SourceCodester Online Discussion Forum Site sql injection
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
razormist · online discussion forum site7 Haz 2023
CVE-2023-3151
35İzleyin
SourceCodester Online Discussion Forum Site manage_user.php sql injection
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
razormist · online discussion forum site7 Haz 2023
CVE-2023-3148
35İzleyin
SourceCodester Online Discussion Forum Site manage_post.php sql injection
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
razormist · online discussion forum site7 Haz 2023
CVE-2023-3147
35İzleyin
SourceCodester Online Discussion Forum Site view_category.php sql injection
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
razormist · online discussion forum site7 Haz 2023
CVE-2023-3150
35İzleyin
SourceCodester Online Discussion Forum Site manage_post.php sql injection
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
razormist · online discussion forum site7 Haz 2023
CVE-2023-3146
35İzleyin
SourceCodester Online Discussion Forum Site manage_category.php sql injection
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
razormist · online discussion forum site7 Haz 2023
CVE-2024-1878
35İzleyin
SourceCodester Employee Management System myprofile.php sql injection
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
razormist · employee management system26 Şub 2024
CVE-2024-1877
35İzleyin
SourceCodester Employee Management System cancel.php sql injection
YüksekCVSS 8,8İstismar yokEPSS %1
- SQL enjeksiyonu
razormist · employee management system26 Şub 2024
CVE-2022-31295
30İzleyin
An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily delete posts.
YüksekCVSS 7,5Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
razormist · online discussion forum site16 Haz 2022
CVE-2023-5027
30İzleyin
SourceCodester Simple Membership System club_validator.php sql injection
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
razormist · simple membership system17 Eyl 2023
CVE-2023-4846
30İzleyin
SourceCodester Simple Membership System delete_member.php sql injection
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
razormist · simple membership system9 Eyl 2023