Skip to main content

Covid 19 Directory On Vaccination System

4 CVEs product

Monthly

CVE-2022-46096 Dec 21, 19:15 MEDIUM POC This Month

A Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid-19 Directory on Vaccination System v1.0 allows attackers to execute arbitrary code via the txtfullname parameter or txtphone. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS RCE Covid 19 Directory On Vaccination System Covid 19 Directory On Vaccination System Project
NVD GitHub
CVSS 3.1
6.1
EPSS
0.5%
CVE-2022-46095 Dec 21, 19:15 MEDIUM POC This Month

Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross-Site Scripting (XSS) vulnerability via verification.php because the program does not verify the. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Covid 19 Directory On Vaccination System Covid 19 Directory On Vaccination System Project
NVD GitHub
CVSS 3.1
6.1
EPSS
0.5%
CVE-2022-28531 May 20, 19:15 CRITICAL POC THREAT Act Now

Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername (aka Username) field. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Covid 19 Directory On Vaccination System Covid 19 Directory On Vaccination System Project
NVD
CVSS 3.1
9.8
EPSS
14.2%
CVE-2022-28530 May 05, 17:15 CRITICAL POC Act Now

Sourcecodester Covid-19 Directory on Vaccination System 1.0 is vulnerable to SQL Injection via cmdcategory. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Covid 19 Directory On Vaccination System Covid 19 Directory On Vaccination System Project
NVD
CVSS 3.1
9.8
EPSS
1.5%
EPSS 1% CVSS 6.1
MEDIUM POC This Month

A Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid-19 Directory on Vaccination System v1.0 allows attackers to execute arbitrary code via the txtfullname parameter or txtphone. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS RCE +2
NVD GitHub
EPSS 0% CVSS 6.1
MEDIUM POC This Month

Sourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross-Site Scripting (XSS) vulnerability via verification.php because the program does not verify the. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Covid 19 Directory On Vaccination System +1
NVD GitHub
EPSS 14% CVSS 9.8
CRITICAL POC THREAT Act Now

Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername (aka Username) field. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Covid 19 Directory On Vaccination System +1
NVD
EPSS 1% CVSS 9.8
CRITICAL POC Act Now

Sourcecodester Covid-19 Directory on Vaccination System 1.0 is vulnerable to SQL Injection via cmdcategory. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Covid 19 Directory On Vaccination System Covid 19 Directory On Vaccination System Project
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy