Priority MEDIUM 60
Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page parameter to php-lfis/admin/index.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00401 · Published 2024-07-29 · No fix listed CWE-79
Priority MEDIUM 50
SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to php-lfis/admin/categories/manage_category.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00786 · Published 2024-07-29 · No fix listed CWE-269
Priority MEDIUM 42
SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categories/view_category.php.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0081 · Published 2024-07-29 · No fix listed CWE-89
Priority LOW 24
Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the first, last, middle name fields in the User Profile page.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00301 · Published 2024-07-29 · No fix listed CWE-79
Priority MEDIUM 44
Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=*" which can be escalated to the remote command execution.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00672 · Published 2024-03-07 · No fix listed CWE-89
Priority HIGH 66
Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=*".
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00408 · Published 2024-03-06 · No fix listed CWE-89
Priority HIGH 82
Lost and Found Information System 1.0 allows account takeover via username and password to a /classes/Users.php?f=save URI.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01516 · Published 2023-11-03 · No fix listed CWE-639
Priority MEDIUM 43
A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.005 · Published 2023-09-17 · No fix listed CWE-89
Priority LOW 28
Cross Site Scripting (XSS) vulnerability in sourcecodester Lost and Found Information System 1.0 allows remote attackers to run arbitrary code via the First Name, Middle Name and Last Name fields on the Create User page.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00636 · Published 2023-08-03 · No fix listed CWE-79
Priority MEDIUM 43
A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00492 · Published 2023-07-23 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00492 · Published 2023-07-15 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability was found in SourceCodester Lost and Found Information System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00492 · Published 2023-07-15 · No fix listed CWE-89
Priority MEDIUM 55
Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=system_info/contact_information.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03832 · Published 2023-06-28 · No fix listed CWE-89
Priority HIGH 71
A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00728 · Published 2023-06-09 · No fix listed CWE-89
Priority LOW 39
A vulnerability, which was classified as critical, was found in SourceCodester Lost and Found Information System 1.0.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00728 · Published 2023-06-09 · No fix listed CWE-89
Priority LOW 39
A vulnerability was found in SourceCodester Lost and Found Information System 1.0.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00735 · Published 2023-05-31 · No fix listed CWE-284
Priority LOW 25
A vulnerability was found in SourceCodester Lost and Found Information System 1.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00547 · Published 2023-05-31 · No fix listed CWE-80
Priority MEDIUM 44
A vulnerability, which was classified as critical, has been found in SourceCodester Lost and Found Information System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0082 · Published 2023-05-14 · No fix listed CWE-89
Priority MEDIUM 44
A vulnerability classified as critical was found in SourceCodester Lost and Found Information System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0082 · Published 2023-05-14 · No fix listed CWE-89
Priority MEDIUM 43
A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00763 · Published 2023-05-12 · No fix listed CWE-89
Priority MEDIUM 60
A vulnerability was found in SourceCodester Lost and Found Information System 1.0.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00633 · Published 2023-05-12 · No fix listed CWE-79
Priority LOW 39
A vulnerability was found in SourceCodester Lost and Found Information System 1.0.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00799 · Published 2023-05-12 · No fix listed CWE-284
Priority MEDIUM 44
A vulnerability was found in SourceCodester Lost and Found Information System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00819 · Published 2023-05-12 · No fix listed CWE-89
Priority MEDIUM 44
A vulnerability was found in SourceCodester Lost and Found Information System 1.0 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00819 · Published 2023-05-12 · No fix listed CWE-89
Priority MEDIUM 60
A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as problematic.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00661 · Published 2023-05-12 · No fix listed CWE-79
Load more
THREATIST.IORead the docs