Threat database

4 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.7%	CVE-2023-50866Kashipara Group Travel Website · SQL Injection Critical9.8EPSS 0.7%2024-01-04CVE Database V5CVE-2023-50866 Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginAction.php resource does not validate the characters received and they are sent unfiltered to the database. EPSS 0.7%Vulnerability Kashipara Group #cwe-89	CVE Database V5	2024-01-04
Critical	9.8	EPSS 0.7%	CVE-2023-50753Kashipara Group Online Notice Board System · SQL Injection Critical9.8EPSS 0.7%2024-01-04CVE Database V5CVE-2023-50753 Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the user/update_profile.php resource does not validate the characters received and they are sent unfiltered to the database. EPSS 0.7%Vulnerability Kashipara Group #cwe-89	CVE Database V5	2024-01-04
Critical	9.8	EPSS 0.7%	CVE-2023-50743Kashipara Group Online Notice Board System · SQL Injection Critical9.8EPSS 0.7%2024-01-04CVE Database V5CVE-2023-50743 Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the registration.php resource does not validate the characters received and they are sent unfiltered to the database. EPSS 0.7%Vulnerability Kashipara Group #cwe-89	CVE Database V5	2024-01-04
Critical	9.9	EPSS 1.5%	CVE-2023-4122Kashipara Group Student Information System · Unrestricted File Upload Critical9.9EPSS 1.5%2023-12-07CVE Database V5CVE-2023-4122 Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application. EPSS 1.5%Vulnerability Kashipara Group #cwe-434	CVE Database V5	2023-12-07

Page 1 of 1