88 matches found
CVE-2024-6043
CVE-2024-6043 CVE-2024-6043 概要 このPythonツールは、SourceCodester Best House Rental Management System 1.0 に影響を与える CVE-2024-6043 の脆弱性を悪用します。この脆弱性により、リモートの攻撃者は adminclass.php ファイルを介してSQLインジェクションを実行でき、特にログイン機能の username パラメータを標的にします。このツールは、脆弱なエンドポイントを検出し、認証をバイパスするペイロードを注入するプロセスを自動化します。 特徴 自動パス検出 :...
CVE-2021-44593
CVE-2021-44593 CVE-2021-44593 の公開情報。Simple College Website における SQL インジェクション／任意ファイルアップロード／リモートコード実行の脆弱性。 説明 Simple College Website 1.0 は、/admin/login.php ページの "username" パラメータにおいて、認証を必要としない UNION ベースの SQL インジェクションに対して脆弱です。これを悪用して任意のファイルをアップロードし、リモートコード実行を獲得することができます。 影響を受けるコンポーネント adminclass.php...
CVE-2026-78202
A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function savesettings of the file adminclass.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used...
EUVD-2026-64741
A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function savesettings of the file adminclass.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used...
CVE-2026-78202 itsourcecode Payroll System admin_class.php save_settings unrestricted upload
A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function savesettings of the file adminclass.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used...
CVE-2026-78202
itsourcecode Payroll System 1.0 is affected by an unrestricted file upload vulnerability in the save_settings function of the file admin_class.php . The root cause is improper handling of the img argument, which allows a remote attacker to upload arbitrary files without authentication. The impact...
EUVD-2026-64740
A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the file adminclass.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the publ...
CVE-2026-78201 itsourcecode Payroll System admin_class.php login sql injection
A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the file adminclass.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the publ...
CVE-2026-78201 itsourcecode Payroll System admin_class.php login sql injection
A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the file adminclass.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the publ...
CVE-2026-78201
CVE-2026-78201 is a SQL injection vulnerability in itsourcecode Payroll System 1.0 , specifically in the Login function of admin_class.php . The Username parameter is vulnerable to unsanitized input, allowing a remote, unauthenticated attacker to inject arbitrary SQL. The CVSS 3.1 score is 7.3 (H...
CVE-2026-78201: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the file adminclass.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the publ...
CVE-2026-78202: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function savesettings of the file adminclass.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used...
CVE-2025-70141: Missing Authentication for Critical Function
SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php. The AJAX dispatcher does not enforce authentication or authorization before invoking administrative methods in adminclass.php based on the action parameter. An unauthenticated remote attacke...
CVE-2025-15214: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Campcodes Park Ticketing System 1.0. The impacted element is the function savepricing of the file adminclass.php. The manipulation of the argument name/ride results in cross site scripting. The attack may be performed from remote. The exploit has been made public and...
CVE-2025-13468: Missing Authorization
A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function deleteforum/deletecareer/deletecomment/deletegallery/deleteevent of the file admin/adminclass.php of the component Delete Handler. Executing manipulation of the argument ID can lead to...
CVE-2025-12853: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in SourceCodester Best House Rental Management System 1.0. This affects the function deletehouse of the file /adminclass.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly...
EUVD-2025-36066
A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /adminclass.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been mad...
EUVD-2020-23003
Malware in sbrugna...