Skip to main content
CVE-2024-7169 MEDIUM POC This Month

A vulnerability classified as problematic has been found in SourceCodester School Fees Payment System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP CSRF School Fees Payment System
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.3%
CVE-2024-7164 MEDIUM POC This Month

A vulnerability has been found in SourceCodester School Fees Payment System 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP School Fees Payment System
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2024-7161 MEDIUM POC This Month

A vulnerability classified as problematic was found in SeaCMS 13.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP CSRF Seacms
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.3%
CVE-2024-7156 MEDIUM POC THREAT This Month

A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as problematic. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure A3700r Firmware
NVD VulDB GitHub
CVSS 4.0
6.9
EPSS
13.3%
CVE-2024-7171 MEDIUM POC This Month

A vulnerability classified as critical has been found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection A3600r Firmware
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
3.1%
CVE-2024-7168 MEDIUM POC This Month

A vulnerability was found in SourceCodester School Fees Payment System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP School Fees Payment System
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7167 MEDIUM POC This Month

A vulnerability was found in SourceCodester School Fees Payment System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP School Fees Payment System
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7166 MEDIUM POC This Month

A vulnerability was found in SourceCodester School Fees Payment System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP School Fees Payment System
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7165 MEDIUM POC This Month

A vulnerability was found in SourceCodester School Fees Payment System 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP School Fees Payment System
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7163 MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in SeaCMS 12.9. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Seacms
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-7162 MEDIUM POC This Month

A vulnerability, which was classified as problematic, has been found in SeaCMS 12.9/13.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Seacms
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7160 MEDIUM POC This Month

A vulnerability classified as critical has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection A3700r Firmware
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
3.0%
CVE-2024-7158 MEDIUM POC This Month

A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B20200504. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection A3100R Firmware
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
3.1%
CVE-2024-7154 MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass A3700r Firmware
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-7170 MEDIUM POC This Month

A vulnerability was found in TOTOLINK A3000RU 5.9c.5185. Rated medium severity (CVSS 5.1), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass A3000Ru Firmware
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.7%
CVE-2024-7159 MEDIUM POC This Month

A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B20201102. Rated medium severity (CVSS 5.1), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass A3600r Firmware
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.6%
CVE-2024-42055 MEDIUM PATCH This Month

Cervantes through 0.5-alpha allows stored XSS. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Cervantes
NVD GitHub
CVSS 3.1
5.4
EPSS
0.4%
CVE-2024-42054 MEDIUM PATCH This Month

Cervantes through 0.5-alpha accepts insecure file uploads. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Unrestricted File Upload vulnerability could allow attackers to upload malicious files that can be executed on the server.

File Upload Cervantes
NVD GitHub
CVSS 3.1
5.4
EPSS
0.4%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy