CVE-2024-10355

소스 코드 주유소 펌프 관리 소프트웨어 무료 다운로드 | SourceCodester 설명 sourcecodester Petrol pump management software v1.0에서 SQL 인젝션 취약점이 발견되었습니다. admin\invoice.php 파일의 일부 알려지지 않은 기능에 영향을 미치는 높은 위험도로 평가되는 취약점으로, id 매개변수를 사용하여 악의적인 SQL 문을 구성해 민감한 정보를 획득함으로써 피해를 초래할 수 있습니다. 취약점 분석 admin\invoice.php 여기서는 사용자 입력 $POST'id...

CVE-2024-10355: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/invoice.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

Cross site scripting

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/invoice.php. The manipulation of the argument invid leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2023-3886: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/invoice.php. The manipulation of the argument invid leads to cross site scripting. It is possible to launch the attack remotely. The...