Vulnerabilities

TI-2024-00318 CVE-2024-0351 · GHSA-pqhv-v3fm-gfwg

SourceCodester Engineers Online Portal session fixiation

MEDIUM 50

A vulnerability classified as problematic has been found in SourceCodester Engineers Online Portal 1.0.

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00591 Published 2024-01-09 No fix listed CWE-384

TI-2024-00317 CVE-2024-0350 · GHSA-c3w2-9vqm-66r7

SourceCodester Engineers Online Portal session expiration

MEDIUM 62

A vulnerability was found in SourceCodester Engineers Online Portal 1.0.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00478 Published 2024-01-09 No fix listed CWE-613

TI-2024-00316 CVE-2024-0349 · GHSA-qj6j-5mq9-mgj8

SourceCodester Engineers Online Portal missing secure attribute

MEDIUM 57

A vulnerability was found in SourceCodester Engineers Online Portal 1.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00385 Published 2024-01-09 No fix listed CWE-614

TI-2024-00315 CVE-2024-0348 · GHSA-pg6f-xvpp-gggv

SourceCodester Engineers Online Portal File Upload resource consumption

MEDIUM 62

A vulnerability was found in SourceCodester Engineers Online Portal 1.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01051 Published 2024-01-09 No fix listed CWE-400

TI-2024-00314 CVE-2024-0347 · GHSA-vx38-rp9r-q692

SourceCodester Engineers Online Portal signup_teacher.php weak password

MEDIUM 51

A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as problematic.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00921 Published 2024-01-09 No fix listed CWE-521

TI-2024-00235 CVE-2024-0260 · GHSA-6pjp-qf2f-r5q8

SourceCodester Engineers Online Portal Password Change change_password_teacher.php session expiration

HIGH 66

A vulnerability, which was classified as problematic, was found in SourceCodester Engineers Online Portal 1.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00524 Published 2024-01-07 No fix listed CWE-613

TI-2023-04860 CVE-2023-5284 · GHSA-qj57-gm77-m65m

SourceCodester Engineers Online Portal upload_save_student.php unrestricted upload

MEDIUM 40

A vulnerability classified as critical has been found in SourceCodester Engineers Online Portal 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01008 Published 2023-09-29 No fix listed CWE-434

TI-2023-04859 CVE-2023-5283 · GHSA-55hg-f2gx-jqr7

SourceCodester Engineers Online Portal teacher_signup.php sql injection

HIGH 71

A vulnerability was found in SourceCodester Engineers Online Portal 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00781 Published 2023-09-29 No fix listed CWE-89

TI-2023-04858 CVE-2023-5282 · GHSA-9hhj-7pgp-fvc5

SourceCodester Engineers Online Portal seed_message_student.php sql injection

HIGH 76

A vulnerability was found in SourceCodester Engineers Online Portal 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0082 Published 2023-09-29 No fix listed CWE-89

TI-2023-04857 CVE-2023-5281 · GHSA-w9xx-prgq-m734

SourceCodester Engineers Online Portal remove_inbox_message.php sql injection

HIGH 82

A vulnerability was found in SourceCodester Engineers Online Portal 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0082 Published 2023-09-29 No fix listed CWE-89

TI-2023-04856 CVE-2023-5280 · GHSA-vww5-xjhj-fxmg

SourceCodester Engineers Online Portal my_students.php sql injection

MEDIUM 44

A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0082 Published 2023-09-29 No fix listed CWE-89

TI-2023-04855 CVE-2023-5279 · GHSA-pqgj-wx7f-6f72

SourceCodester Engineers Online Portal my_classmates.php sql injection

HIGH 82

A vulnerability has been found in SourceCodester Engineers Online Portal 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0082 Published 2023-09-29 No fix listed CWE-89

TI-2023-04854 CVE-2023-5278 · GHSA-gcfp-w498-722f

SourceCodester Engineers Online Portal login.php sql injection

HIGH 75

A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00827 Published 2023-09-29 No fix listed CWE-89

TI-2023-04853 CVE-2023-5277 · GHSA-7xxv-8q2p-34g3

SourceCodester Engineers Online Portal student_avatar.php unrestricted upload

HIGH 75

A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00986 Published 2023-09-29 No fix listed CWE-434

TI-2023-04852 CVE-2023-5276 · GHSA-7f24-qc6x-7gjv

SourceCodester Engineers Online Portal downloadable_student.php sql injection

HIGH 75

A vulnerability classified as critical was found in SourceCodester Engineers Online Portal 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0082 Published 2023-09-29 No fix listed CWE-89

TI-2021-19365 CVE-2021-43437 · GHSA-xx33-26x2-m77p

In sourcecodetester Engineers Online Portal as of 10-21-21, an attacker can manipulate…

MEDIUM 41

In sourcecodetester Engineers Online Portal as of 10-21-21, an attacker can manipulate the Host header as seen by the web application and cause the application to behave in unexpected ways.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01268 Published 2021-12-20 No fix listed CWE-74

TI-2021-18899 CVE-2021-42671 · GHSA-qv2q-frhr-phx3

An incorrect access control vulnerability exists in Sourcecodester Engineers Online…

MEDIUM 51

An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.19829 Published 2021-11-05 No fix listed CWE-425

TI-2021-18898 CVE-2021-42670 · GHSA-mw79-98hv-j43p

A SQL injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via…

MEDIUM 53

A SQL injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to the announcements_student.php web page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08415 Published 2021-11-05 No fix listed CWE-89

TI-2021-18897 CVE-2021-42669 · GHSA-h6f4-pv83-7533

A file upload vulnerability exists in Sourcecodester Engineers Online Portal in PHP via…

MEDIUM 62

A file upload vulnerability exists in Sourcecodester Engineers Online Portal in PHP via dashboard_teacher.php, which allows changing the avatar through teacher_avatar.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.2327 Published 2021-11-05 No fix listed CWE-434

TI-2021-18896 CVE-2021-42668 · GHSA-6rv5-2rfw-cjj8

A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via…

MEDIUM 50

A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter in the my_classmates.php web page..

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04767 Published 2021-11-05 No fix listed CWE-89

TI-2021-18894 CVE-2021-42666 · GHSA-762r-hxfq-557v

A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via…

MEDIUM 45

A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to quiz_question.php, which could let a malicious user extract sensitive data from the web server and in some cas…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04521 Published 2021-11-05 No fix listed CWE-89

TI-2021-18893 CVE-2021-42665 · GHSA-5vc7-wq49-64h9

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP…

MEDIUM 50

An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04988 Published 2021-11-05 No fix listed CWE-89

TI-2021-18892 CVE-2021-42664 · GHSA-fmwm-fpxf-fvm8

A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers…

LOW 28

A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the (1) Quiz title and (2) quiz description parameters to add_quiz.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01674 Published 2021-11-05 No fix listed CWE-79

Vulnerabilities

Filters