CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-3679 – SourceCodester Lost and Found Information System HTTP POST Request sql injection
https://notcve.org/view.php?id=CVE-2023-3679
A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=save_inquiry of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. • https://vuldb.com/?ctiid.234224 https://vuldb.com/?id.234224 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 3CVE-2023-33592 – Lost and Found Information System v1.0 - SQL Injection
https://notcve.org/view.php?id=CVE-2023-33592
Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=system_info/contact_information. Lost and Found Information System version 1.0 suffers from a remote SQL injection vulnerability. • https://www.exploit-db.com/exploits/51570 https://github.com/FuckingHack3r/CVE-2023-33592 https://github.com/ChineseOldboy/CVE-2023-33592 http://packetstormsecurity.com/files/173331/Lost-And-Found-Information-System-1.0-SQL-Injection.html https://github.com/DARSHANAGUPTA10/CVE/blob/main/CVE-2023-33592 https://www.sourcecodester.com/php/16525/lost-and-found-information-system-using-php-and-mysql-db-source-code-free-download.html • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-3177 – SourceCodester Lost and Found Information System view_inquiry.php sql injection
https://notcve.org/view.php?id=CVE-2023-3177
A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin\inquiries\view_inquiry.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/AnotherN/cvv/blob/main/imgs/Lost%20and%20Found%20Information%20System%20-%20multiple%20vulnerabilities.md#4sql-injection-vulnerability-in-admininquiriesview_inquiryphp https://vuldb.com/?ctiid.231151 https://vuldb.com/?id.231151 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-3176 – SourceCodester Lost and Found Information System manage_user.php sql injection
https://notcve.org/view.php?id=CVE-2023-3176
A vulnerability, which was classified as critical, was found in SourceCodester Lost and Found Information System 1.0. Affected is an unknown function of the file admin\user\manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/AnotherN/cvv/blob/main/imgs/Lost%20and%20Found%20Information%20System%20-%20multiple%20vulnerabilities.md#7sql-injection-vulnerability-in-adminusermanage_userphp https://vuldb.com/?ctiid.231150 https://vuldb.com/?id.231150 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-3018 – SourceCodester Lost and Found Information System access control
https://notcve.org/view.php?id=CVE-2023-3018
A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/?page=user/list. The manipulation leads to improper access controls. • https://medium.com/@akashpandey380/lost-and-found-information-system-v1-0-idor-cve-2023-977966c4450d https://vuldb.com/?ctiid.230362 https://vuldb.com/?id.230362 • CWE-284: Improper Access Control •