SourceCodester / Engineers Online Portal
17 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2024-0351 | SourceCodester Engineers Online Portal session fixiation | LOW | 3.5 | Jan 9, 2024 |
| CVE-2024-0350 | SourceCodester Engineers Online Portal session expiration | MEDIUM | 6.5 | Jan 9, 2024 |
| CVE-2024-0349 | SourceCodester Engineers Online Portal missing secure attribute | MEDIUM | 5.3 | Jan 9, 2024 |
| CVE-2024-0348 | SourceCodester Engineers Online Portal File Upload resource consumption | MEDIUM | 6.5 | Jan 9, 2024 |
| CVE-2024-0347 | SourceCodester Engineers Online Portal signup_teacher.php weak password | LOW | 3.7 | Jan 9, 2024 |
| CVE-2024-0260 | SourceCodester Engineers Online Portal Password Change change_password_teacher.php session expiration | HIGH | 7.5 | Jan 7, 2024 |
| CVE-2024-0182 | SourceCodester Engineers Online Portal Admin Login sql injection | CRITICAL | 9.8 | Jan 1, 2024 |
| CVE-2023-7160 | SourceCodester Engineers Online Portal Add Engineer cross site scripting | MEDIUM | 6.1 | Dec 29, 2023 |
| CVE-2023-5284 | SourceCodester Engineers Online Portal upload_save_student.php unrestricted upload | HIGH | 8.8 | Sep 29, 2023 |
| CVE-2023-5283 | SourceCodester Engineers Online Portal teacher_signup.php sql injection | HIGH | 8.8 | Sep 29, 2023 |
| CVE-2023-5282 | SourceCodester Engineers Online Portal seed_message_student.php sql injection | CRITICAL | 9.8 | Sep 29, 2023 |
| CVE-2023-5281 | SourceCodester Engineers Online Portal remove_inbox_message.php sql injection | CRITICAL | 9.8 | Sep 29, 2023 |
| CVE-2023-5280 | SourceCodester Engineers Online Portal my_students.php sql injection | CRITICAL | 9.8 | Sep 29, 2023 |
| CVE-2023-5279 | SourceCodester Engineers Online Portal my_classmates.php sql injection | CRITICAL | 9.8 | Sep 29, 2023 |
| CVE-2023-5278 | SourceCodester Engineers Online Portal login.php sql injection | CRITICAL | 9.8 | Sep 29, 2023 |
| CVE-2023-5277 | SourceCodester Engineers Online Portal student_avatar.php unrestricted upload | CRITICAL | 9.8 | Sep 29, 2023 |
| CVE-2023-5276 | SourceCodester Engineers Online Portal downloadable_student.php sql injection | CRITICAL | 9.8 | Sep 29, 2023 |
Showing 1 to 17 of 17 CVEs