Skip to content
OpenAdvisories

Archive

9 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /9 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-4866

    SourceCodester Online Tours & Travels Management System booking.php exec sql injection

    A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of the file booking.php. The manipulation of the argument id leads to sql injection. The attack may be in…

    SourceCodester Online Tours & Travels Management System
  • Medium 4.3
    CVE-2023-4865

    SourceCodester Take-Note App cross-site request forgery

    A vulnerability has been found in SourceCodester Take-Note App 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclos…

    SourceCodester Take-Note App
  • Medium 4.3
    CVE-2023-4874

    Undefined Behavior for Input to API in Mutt

    Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12

    mutt mutt mutt mutt Debian Ubuntu Azure Linux
  • Medium 6.3
    CVE-2023-4852

    IBOS OA optimize sql injection

    A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=dashboard/database/optimize. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been d…

    IBOS OA
  • Medium 6.3
    CVE-2023-4851

    IBOS OA edit&op=member sql injection

    A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=dashboard/position/edit&op=member. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit ha…

    IBOS OA
  • Medium 6.3
    CVE-2023-4850

    IBOS OA del sql injection

    A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=dashboard/position/del. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been di…

    IBOS OA
  • Medium 6.3
    CVE-2023-4849

    IBOS OA trash&op=del sql injection

    A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5. Affected by this issue is some unknown functionality of the file ?r=file/dashboard/trash&op=del. The manipulation of the argument fids leads to sql injection. The attack may b…

    IBOS OA
  • Medium 6.3
    CVE-2023-4848

    SourceCodester Simple Book Catalog App delete_book.php sql injection

    A vulnerability classified as critical was found in SourceCodester Simple Book Catalog App 1.0. Affected by this vulnerability is an unknown functionality of the file delete_book.php. The manipulation of the argument delete leads to sql injection. The attack …

    SourceCodester Simple Book Catalog App
  • Medium 6.3
    CVE-2023-4846

    SourceCodester Simple Membership System delete_member.php sql injection

    A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file delete_member.php. The manipulation of the argument mem_id leads to sql injection. The attack may b…

    SourceCodester Simple Membership System
  • Medium 6.3
    CVE-2023-4845

    SourceCodester Simple Membership System account_edit_query.php sql injection

    A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file account_edit_query.php. The manipulation of the argument admin_id leads to sql injection. The attac…

    SourceCodester Simple Membership System
  • Medium 6.4
    CVE-2023-4838

    The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcod…

    specialk Simple Download Counter Web / CMS