Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 0.8%	CVE-2024-37857lost-and-found-information-system · n/a High8.8EPSS 0.8%2024-07-29CVE Database V5CVE-2024-37857 SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categories/view_category.php. EPSS 0.8%Vulnerability	CVE Database V5	2024-07-29
Medium	5.4	EPSS 0.3%	CVE-2024-37856lost-and-found-information-system · n/a Medium5.4EPSS 0.3%2024-07-29CVE Database V5CVE-2024-37856 Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the first, last, middle name fields in the User Profile page. EPSS 0.3%Vulnerability	CVE Database V5	2024-07-29

Page 1 of 1