Code-Projects E-Health Care System SQL注入漏洞

Code-Projects E-Health Care System is a Code-Projects open source e-health care system. A SQL injection vulnerability exists in Code-Projects E-Health Care System version 1.0, which stems from the parameter email/adminpswd in the file /Admin/adminlogin.php that can lead to SQL injection...

CVE-2024-10740: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects E-Health Care System up to 1.0. This affects an unknown part of the file /Admin/consultingdetail.php. The manipulation of the argument consultingid leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-10733: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been...

Code-Projects E-Health Care System SQL注入漏洞

Code-Projects E-Health Care System is a Code-Projects open source e-health care system. A SQL injection vulnerability exists in Code-Projects E-Health Care System version 1.0, which stems from the parameter fname in the file /Users/registration.php that can lead to SQL injection...

Code-Projects E-Health Care System SQL注入漏洞

Code-Projects E-Health Care System is an e-health care system from Code-Projects open source. A SQL injection vulnerability exists in Code-Projects E-Health Care System version 1.0 and earlier, which stems from the parameter consultingid in the file /Admin/consultingdetail.php that can lead to SQ...

CVE-2024-10741: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file /Users/registration.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2024-10739: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects E-Health Care System 1.0. Affected by this issue is some unknown functionality of the file /Admin/adminlogin.php. The manipulation of the argument email/adminpswd as part of String leads to sql injection. The attac...

PT-2024-16496 · Unknown · Code-Projects Restaurant Order System

Name of the Vulnerable Software and Affected Versions: code-projects Restaurant Order System version 1.0 Description: A critical issue was found in the code-projects Restaurant Order System, affecting some unknown functionality of the file /login.php. The manipulation of the uid argument leads to...

CVE-2024-10700 code-projects University Event Management System submit.php sql injection

A vulnerability was found in code-projects University Event Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file submit.php. The manipulation of the argument name/email/title/Year/gender/fromdate/todate/people leads to sql injection. The...

CVE-2024-10699 code-projects Wazifa System logincontrol.php sql injection

A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknown part of the file /controllers/logincontrol.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

zero-day

Zero-Day Vulnerabilities in Open-Source Projects This reposi...

PT-2024-16473 · Unknown · Code-Projects Wazifa System

Name of the Vulnerable Software and Affected Versions: code-projects Wazifa System version 1.0 Description: A critical issue was found in the code-projects Wazifa System, affecting an unknown part of the file /controllers/logincontrol.php. The manipulation of the username argument leads to SQL...

CVE-2024-10699: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknown part of the file /controllers/logincontrol.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

Code-Projects University Event Management System SQL注入漏洞

Code-Projects University Event Management System is an open source university event management system from Code-Projects. Code-Projects University Event Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from the parameter...

Code-Projects Simple Car Rental System SQL注入漏洞

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A SQL injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from the parameter fname in the file /signup.php that can lead to SQL injection...

CVE-2024-10700: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects University Event Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file submit.php. The manipulation of the argument name/email/title/Year/gender/fromdate/todate/people leads to sql injection. The...

CVE-2024-37411

Missing Authorization vulnerability in Progress Planner Progress Planner progress-planner.This issue affects Progress Planner: from n/a through = 0.9.1...

CVE-2024-37411 WordPress Progress Planner plugin <= 0.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Team Emilia Projects Progress Planner allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Progress Planner: from n/a through 0.9.1...

CVE-2024-37411

CVE-2024-37411 describes a Missing Authorization vulnerability in the WordPress plugin Progress Planner. Concrete details in connected sources identify a Broken Access Control issue, affecting Progress Planner versions from n/a through 0.9.1 (

CVE-2024-10608 code-projects Courier Management System login.php sql injection

A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has be...