Engineers Online Portal Project
Engineers Online Portal Project Engineers Online Portal: vulnerabilidades y CVE
Engineers Online Portal Project Engineers Online Portal tiene 23 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 11 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE23
Últimos 12 meses0
Críticas11
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-0351 | Baja (3.5) | 0.59% | — | 9 ene 2024 | A vulnerability classified as problematic has been found in SourceCodester Engineers Online Portal 1.0. This affects an unknown part. The manipulation leads to session fixiation. It is possible to initiate the attack… |
| CVE-2024-0350 | Media (6.5) | 0.48% | — | 9 ene 2024 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to session expiration. The attack… |
| CVE-2024-0349 | Media (5.3) | 0.39% | — | 9 ene 2024 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to sensitive cookie… |
| CVE-2024-0348 | Media (6.5) | 1.1% | — | 9 ene 2024 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as problematic. Affected is an unknown function of the component File Upload Handler. The manipulation leads to resource… |
| CVE-2024-0347 | Baja (3.7) | 0.92% | — | 9 ene 2024 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as problematic. This issue affects some unknown processing of the file signup_teacher.php. The manipulation of the argument Password… |
| CVE-2024-0260 | Alta (7.5) | 0.52% | — | 7 ene 2024 | A vulnerability, which was classified as problematic, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file change_password_teacher.php of the component Password Change.… |
| CVE-2023-5284 | Alta (8.8) | 1.0% | — | 29 sept 2023 | A vulnerability classified as critical has been found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file upload_save_student.php. The manipulation of the argument uploaded_file… |
| CVE-2023-5283 | Alta (8.8) | 0.78% | — | 29 sept 2023 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file teacher_signup.php. The manipulation of the argument… |
| CVE-2023-5282 | Crítica (9.8) | 0.82% | — | 29 sept 2023 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file seed_message_student.php. The manipulation of the argument… |
| CVE-2023-5281 | Crítica (9.8) | 0.82% | — | 29 sept 2023 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as critical. This affects an unknown part of the file remove_inbox_message.php. The manipulation of the argument id leads… |
| CVE-2023-5280 | Crítica (9.8) | 0.82% | — | 29 sept 2023 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file my_students.php. The manipulation of the argument id… |
| CVE-2023-5279 | Crítica (9.8) | 0.82% | — | 29 sept 2023 | A vulnerability has been found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file my_classmates.php. The manipulation of the… |
| CVE-2023-5278 | Crítica (9.8) | 0.83% | — | 29 sept 2023 | A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username/password leads… |
| CVE-2023-5277 | Crítica (9.8) | 0.99% | — | 29 sept 2023 | A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of the file student_avatar.php. The manipulation of the… |
| CVE-2023-5276 | Crítica (9.8) | 0.82% | — | 29 sept 2023 | A vulnerability classified as critical was found in SourceCodester Engineers Online Portal 1.0. This vulnerability affects unknown code of the file downloadable_student.php. The manipulation of the argument id leads to… |
| CVE-2021-43437 | Alta (8.8) | 1.2% | — | 20 dic 2021 | In sourcecodetester Engineers Online Portal as of 10-21-21, an attacker can manipulate the Host header as seen by the web application and cause the application to behave in unexpected ways. Very often multiple websites… |
| CVE-2021-42671 | Alta (7.5) | 20% | — | 5 nov 2021 | An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads. An attacker can leverage this vulnerability in order to bypass access… |
| CVE-2021-42670 | Crítica (9.8) | 8.4% | — | 5 nov 2021 | A SQL injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to the announcements_student.php web page. As a result a malicious user can extract sensitive data from the web… |
| CVE-2021-42669 | Crítica (9.8) | 23% | — | 5 nov 2021 | A file upload vulnerability exists in Sourcecodester Engineers Online Portal in PHP via dashboard_teacher.php, which allows changing the avatar through teacher_avatar.php. Once an avatar gets uploaded it is getting… |
| CVE-2021-42668 | Crítica (9.8) | 4.7% | — | 5 nov 2021 | A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter in the my_classmates.php web page.. As a result, an attacker can extract sensitive data from the web server and… |
| CVE-2021-42666 | Alta (8.8) | 4.5% | — | 5 nov 2021 | A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to quiz_question.php, which could let a malicious user extract sensitive data from the web server and in some… |
| CVE-2021-42665 | Crítica (9.8) | 4.9% | — | 5 nov 2021 | An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication. |
| CVE-2021-42664 | Media (5.4) | 1.7% | — | 5 nov 2021 | A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the (1) Quiz title and (2) quiz description parameters to add_quiz.php. An attacker can leverage this… |