CVE-2024-13024

CVE-2024-13024 affects Codezips Blood Bank Management System 1.0. The vulnerability is in the processing of the file /campaign.php, where manipulation of the cname parameter leads to an SQL injection. Attacks can be remote, and multiple sources indicate the vulnerability is exploitable without us...

CVE-2024-13024 Codezips Blood Bank Management System campaign.php sql injection

A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /campaign.php. The manipulation of the argument cname leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-13024: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /campaign.php. The manipulation of the argument cname leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2017-6571: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign.php with the GET Parameter: id...

PT-2017-17164

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue is present, which can be exploited with WordPress admin access. This issue affects the ./inc/campaign/view-campaign.php file, specifically the id GET parameter. Recommendations Fo...

PT-2014-2397

Name of the Vulnerable Software and Affected Versions Newsletter Manager plugin for WordPress versions prior to 1.0.2 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through various...