PT-2026-79830

A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the file admin class.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the...

PT-2026-79831

Name of the Vulnerable Software and Affected Versions itsourcecode Payroll System version 1.0 Description An unrestricted file upload issue exists in the save settings function within the admin class.php file. A remote attacker can exploit this by manipulating the img argument to upload arbitrary...

CVE-2025-10782: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/class.php. Performing manipulation of the argument classname results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2024-50840: Buffer Copy without Checking Size of Input

A Stored Cross-Site Scripting XSS vulnerability was found in /admin/class.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the classname parameter...

CVE-2024-50824: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /admin/class.php in kashipara E-learning Management System Project 1.0 via the classname parameter...

PT-2024-31977

Name of the Vulnerable Software and Affected Versions Best House Rental Management System version 1.0 Description The issue concerns an arbitrary file upload vulnerability. This vulnerability is located in the update account function of the file rental/admin class.php. Recommendations For Best...

PT-2024-31975

Name of the Vulnerable Software and Affected Versions Best House Rental Management System version 1.0 Description The issue is related to a SQL injection vulnerability in the delete category function, located in the file rental/admin class.php. This vulnerability can potentially be exploited to...

PT-2024-31978

Name of the Vulnerable Software and Affected Versions Best House Rental Management System version 1.0 Description The issue concerns an arbitrary file upload vulnerability. This vulnerability is located in the save settings function of the file rental/admin class.php. Recommendations For Best Hou...

CVE-2024-7927: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as critical was found in ZZCMS 2023. Affected by this vulnerability is an unknown functionality of the file /admin/class.php?dowhat=modifyclass. The manipulation of the argument skin leads to path traversal. The attack can be launched remotely. The exploit has been...

PT-2024-4404 · Itsourcecode · Itsourcecode Banking Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Banking Management System version 1.0 Description: A critical issue was found in the Banking Management System, affecting an unknown functionality of the file admin class.php. The manipulation of the username argument leads to SQ...

PT-2024-18963 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best POS Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file admin class.php. The manipulation of the img argument leads to sql injection. It is possibl...