Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-40579	Modificada	Media (6.5)	0.84%	—	Online Enrollment Management System Project Online Enrollment Management System	28/12/2021	17/6/2026	https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 is affected by: Incorrect Access Control. The impact is: gain privileges (remote).
CVE-2021-44599	Modificada	Alta (7.5)	1.2%	—	Online Enrollment Management System Project Online Enrollment Management System	23/12/2021	17/6/2026	The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. A crafted payload injects a SQL sub-query that calls MySQL's load_file function with a UNC file path that references a URL on an external domain. The application interacted with that domain,…
CVE-2021-40578	Modificada	Alta (7.2)	1.5%	—	Online Enrollment Management System Project Online Enrollment Management System	7/12/2021	17/6/2026	Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive information and execute arbitrary SQL commands via IDNO parameter.
CVE-2021-40577	Modificada	Media (5.4)	1.6%	💥 Exploit	Online Enrollment Management System Project Online Enrollment Management System	8/11/2021	17/6/2026	A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 in the Add-Users page via the Name parameter.