7143 matches found
CVE-2024-4972
A vulnerability classified as critical has been found in code-projects Simple Chat System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...
CVE-2024-4972 code-projects Simple Chat System login.php sql injection
A vulnerability classified as critical has been found in code-projects Simple Chat System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...
CVE-2024-4972 code-projects Simple Chat System login.php sql injection
A vulnerability classified as critical has been found in code-projects Simple Chat System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...
CVE-2024-4972
The CVE-2024-4972 entry concerns code-projects Simple Chat System 1.0. Affected component: login.php, where manipulating the email/password parameters enables SQL injection. This vulnerability is exploitable remotely, and public disclosures exist. Connected documents identify the affected product...
PT-2024-33660 · Unknown · Code-Projects Simple Chat System
Name of the Vulnerable Software and Affected Versions: code-projects Simple Chat System version 1.0 Description: A problematic issue was found in the code-projects Simple Chat System, affecting an unknown function of the file /register.php. The manipulation of the name argument leads to cross-sit...
CVE-2024-4975: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in code-projects Simple Chat System 1.0. This issue affects some unknown processing of the component Message Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...
CVE-2024-34954
Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting XSS via the budget parameter...
CVE-2024-34954
Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting XSS via the budget parameter...
CVE-2024-34955
Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter...
CVE-2024-34955
Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter...
CVE-2024-34955
Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter...
CVE-2024-34955
Code-projects Budget Management 1.0 is vulnerable to SQL Injection due to improper neutralization of special elements used in an SQL command. The vulnerability is triggered via the delete parameter , which could allow an attacker to manipulate database queries. As a temporary workaround, it is re...
CVE-2024-34954
Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting XSS via the budget parameter...
CVE-2024-34954
Code-projects Budget Management version 1.0 is vulnerable to Cross Site Scripting (XSS) . The vulnerability occurs due to the improper neutralization of input during web page generation specifically via the budget parameter . This flaw allows for potential malicious script injection , which can c...
PT-2024-26269 · Unknown · Code-Projects Budget Management
Name of the Vulnerable Software and Affected Versions: Code-projects Budget Management version 1.0 Description: The issue concerns Cross Site Scripting XSS via the budget parameter. This allows for potential malicious script injection, affecting the security of the application. Recommendations: F...
CVE-2024-34954: Improper Neutralization of Input During Web Page Generation
Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting XSS via the budget parameter...
CVE-2024-34955: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter...
PT-2024-26270 · Unknown · Code-Projects Budget Management
Name of the Vulnerable Software and Affected Versions: Code-projects Budget Management version 1.0 Description: The issue is related to SQL Injection, which occurs via the delete parameter. This allows for potential manipulation of database queries. Recommendations: For Code-projects Budget...
CVE-2024-33647
A vulnerability has been identified in Polarion ALM All versions V2404.0. The Apache Lucene based query engine in the affected application lacks proper access controls. This could allow an authenticated user to query items beyond the user's allowed projects...