PT-2024-17224

Name of the Vulnerable Software and Affected Versions SourceCodester Best House Rental Management System version 1.0 Description A problem has been found in the processing of the file /rental/ajax.php?action=save tenant. The manipulation of the lastname, firstname, and middlename arguments leads ...

PT-2024-39377

Name of the Vulnerable Software and Affected Versions: SourceCodester Best House Rental Management System version 1.0 Description: A vulnerability has been found in the system, classified as problematic, affecting an unknown functionality of the file /ajax.php?action=save category. The manipulati...

PT-2024-38298

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Realtime Quiz System version 1.0 Description A problematic issue was found in the system, affecting an unknown part of the file /ajax.php?action=save user. This issue leads to cross-site request forgery and can be initiat...

PT-2023-31467

Name of the Vulnerable Software and Affected Versions Sourcecodester Customer Support System version 1.0 Description The issue concerns multiple SQL injection vulnerabilities in the /customer support/ajax.php?action=save ticket endpoint via department id, customer id, and subject. This allows for...

PT-2023-31257

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the lastname parameter at the "/customer support/ajax.php?action=save user" API endpoint...

PT-2023-31430

Name of the Vulnerable Software and Affected Versions Customer Support System version v1 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the subject parameter at the "/customer support/ajax.php?action=save ticket" API endpoint...

PT-2022-21047

Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description The issue allows for arbitrary code execution via the "car-rental-management-system/admin/ajax.php?action=save car" API endpoint. Recommendations For Car Rental Management System version 1.0...

PT-2021-11455

Name of the Vulnerable Software and Affected Versions: Simple College Website version 1.0 Description: The issue allows a user to conduct remote code execution via the "/alumni/admin/ajax.php?action=save settings" API endpoint when uploading a malicious file using the image upload functionality...

PT-2018-9677

Name of the Vulnerable Software and Affected Versions: joyplus-cms version 1.6.0 Description: The issue concerns a Cross-Site Scripting XSS problem. It is exploited through the device name parameter in a "manager/admin ajax.php?action=save flag=add" request, specifically the "/manager/admin...