CVE-2024-9080: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Student Record System 1.0. It has been classified as critical. Affected is an unknown function of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. It is possible to launch the attack remotely. The explo...

CVE-2024-5066: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Online Course Registration System 3.1. Affected by this vulnerability is an unknown functionality of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. The attack can be launched...

PT-2024-34385

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Course Registration System version 3.1 Description: A critical vulnerability was found in the PHPGurukul Online Course Registration System, affecting an unknown functionality of the file /pincode-verification.php. The...

CVE-2020-12429: Improper Neutralization of Special Elements used in an SQL Command

Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and authentication bypass in the login pages: admin/change-password.php, admin/checkavailability.php, admin/index.php, change-password.php, checkavailability.php, includes/header.php,...

PT-2020-13109

Name of the Vulnerable Software and Affected Versions Online Course Registration version 2.0 Description The issue concerns multiple SQL injections that can lead to a complete database compromise and authentication bypass in various login pages, including admin/change-password.php, admin/check...