CVE-2024-11660 code-projects Farmacia usuario.php cross site scripting

A vulnerability was found in code-projects Farmacia 1.0. It has been classified as problematic. This affects an unknown part of the file usuario.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed...

CVE-2024-11660

CVE-2024-11660 affects code-projects Farmacia (version 1.0). The vulnerability resides in the file usuario.php, where manipulation of the name argument leads to cross-site scripting (XSS). It can be triggered remotely and exploitation has been disclosed publicly; other parameters may also be affe...

CVE-2024-11660 code-projects Farmacia usuario.php cross site scripting

A vulnerability was found in code-projects Farmacia 1.0. It has been classified as problematic. This affects an unknown part of the file usuario.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed...

CVE-2024-11649

Summary of CVE-2024-11649 : Affects 1000 Projects Beauty Parlour Management System 1.0. The vulnerability is in the admin script /admin/search-appointment.php where manipulation of the searchdata argument causes an SQL injection. The issue can be triggered remotely and the exploit has been disclo...

CVE-2024-11647

A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack may be...

CVE-2024-11648

A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-customer.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-11647

The CVE-2024-11647 issue affects 1000 Projects Beauty Parlour Management System v1.0. The vulnerability lies in /admin/view-appointment.php, where manipulating the viewid parameter allows SQL injection. Descriptions note remote exploitation and that the exploit has been publicly disclosed. Connec...

1000 Projects Beauty Parlour Management System SQL注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which is caused by an SQL injection into the parameter viewid...

CVE-2024-11646: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit-services.php. The manipulation of the argument sername leads to sql injection. The attack can be launched...

CVE-2024-11648: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-customer.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-11647: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack may be...

RHEL 9 : RHOSP 17.1.4 (openstack-tripleo-common and python-tripleoclient) (RHSA-2024:9990)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9990 advisory. Python library for code used by TripleO projects a Python TripleOClient for Openstack Director Security Fixes: RHOSP Director Disables TLS Verificati...

RHEL 8 : RHOSP 17.1.4 (openstack-tripleo-common and python-tripleoclient) (RHSA-2024:9991)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9991 advisory. Python library for code used by TripleO projects a Python TripleOClient for Openstack Director Security Fixes: RHOSP Director Disables TLS Verificati...

PT-2024-17170 · Code Projects · Code-Projects Farmacia

Name of the Vulnerable Software and Affected Versions: code-projects Farmacia version 1.0 Description: A vulnerability was found in the file usuario.php, where the manipulation of the name argument leads to cross-site scripting. It is possible to initiate the attack remotely. Other parameters mig...

CVE-2024-11660: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Farmacia 1.0. It has been classified as problematic. This affects an unknown part of the file usuario.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed...

CVE-2024-11649: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated...

CVE-2024-11673: Cross-Site Request Forgery (CSRF)

A vulnerability, which was classified as problematic, has been found in 1000 Projects Bookstore Management System 1.0. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the publ...

CVE-2024-11646 1000 Projects Beauty Parlour Management System edit-services.php sql injection

A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit-services.php. The manipulation of the argument sername leads to sql injection. The attack can be launched...

CVE-2024-11632

A vulnerability was found in code-projects Simple Car Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file /bookcar.php. The manipulation of the argument fname/idno/gender/email/phone/location leads to sql injection. It is possible to launch the attac...

CVE-2024-11632 code-projects Simple Car Rental System book_car.php sql injection

A vulnerability was found in code-projects Simple Car Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file /bookcar.php. The manipulation of the argument fname/idno/gender/email/phone/location leads to sql injection. It is possible to launch the attac...