CVE-2024-33977: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in E-Negosyo System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via 'view' parameter in /admin/orders/index.php'...

PT-2024-25617

Name of the Vulnerable Software and Affected Versions School Attendance Monitoring System and School Event Management System version 1.0 Description A Cross-Site Scripting XSS issue exists, allowing an attacker to create a specially crafted URL and send it to a victim. This could lead to the...

PT-2024-25598

Name of the Vulnerable Software and Affected Versions PayPal, Credit Card and Debit Card Payment version 1.0 Description The issue allows an attacker to exploit a SQL injection vulnerability by sending a specially crafted query to the server. This can be done through the xtsearch parameter in the...

CVE-2024-33969: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in...

CVE-2024-33992: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/student/index.php'...

PT-2024-25610

Name of the Vulnerable Software and Affected Versions E-Negosyo System version 1.0 Description The issue is related to a Cross-Site Scripting XSS vulnerability. An attacker could create a specially crafted URL and send it to a victim to obtain their session cookie details via the category paramet...

CVE-2024-33985: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'View' parameter in '/course/index.php...

CVE-2024-33994: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session details via the 'view' parameter in '/event/index.php'...

PT-2024-25619

Name of the Vulnerable Software and Affected Versions School Attendance Monitoring System and School Event Management System version 1.0 Description A Cross-Site Scripting XSS issue affects the system, allowing an attacker to create a specially crafted URL and send it to a victim. This could lead...

CVE-2024-33965: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'view' in...

CVE-2024-33966: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'xtsearch' in...

CVE-2024-7496: External Control of File Name or Path

A vulnerability has been found in itsourcecode Airline Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack can be initiated remotely. The exploit has been...

CVE-2024-33963: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in '/admin/modroom/index.php'...

CVE-2024-33975: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted JavaScript payload to an authenticated user and partially take over their browser session via 'view' parameter in '/admin/products/index.ph...

CVE-2024-33968: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Attendance' and 'YearLevel' in...

CVE-2024-7497: External Control of File Name or Path

A vulnerability was found in itsourcecode Airline Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

PT-2024-25611

Name of the Vulnerable Software and Affected Versions PayPal, Credit Card and Debit Card Payment version 1.0 Description A Cross-Site Scripting XSS issue affects the payment system, allowing an attacker to create a specially crafted URL and send it to a victim. The goal is to obtain details of th...

PT-2024-25618

Name of the Vulnerable Software and Affected Versions School Attendance Monitoring System and School Event Management System version 1.0 Description A Cross-Site Scripting XSS issue exists, allowing an attacker to create a specially crafted URL and send it to a victim. This could lead to the...

CVE-2024-33964: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in '/admin/modusers/index.php'...

CVE-2024-7438 SimpleMachines SMF User Alert Read Status index.php resource injection

A vulnerability has been found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?action=profile;u=2;area=showalerts;do=read of the component User Alert Read Status Handler. The manipulation of the argument...