CVE-2026-19211: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Photo Share Website 1.0. This affects an unknown function of the file /social/ajax.php?action=signup. Performing a manipulation of the argument email results in sql injection. Remote exploitation of the attack is possible. The exploit has been made publ...

CVE-2024-11054: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in SourceCodester Simple Music Cloud Community System 1.0. This vulnerability affects unknown code of the file /music/ajax.php?action=signup. The manipulation of the argument pp leads to unrestricted upload. The attack can be initiated remotely. Th...

PT-2024-39383

Name of the Vulnerable Software and Affected Versions SourceCodester Best House Rental Management System version 1.0 Description A critical vulnerability has been found in the system, affecting some unknown functionality of the file "/ajax.php?action=signup". The manipulation of the arguments...

CVE-2024-9039: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=signup. The manipulation of the argument firstname/lastname/email leads to sql injection...

CVE-2024-42777: Unrestricted Upload of File with Dangerous Type

An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=signup" of Kashipara Music Management System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file...