CVE-2024-7667: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Car Driving School Management System 1.0. This affects the function deleteusers of the file User.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-7667 SourceCodester Car Driving School Management System User.php delete_users sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Car Driving School Management System 1.0. This affects the function deleteusers of the file User.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-7667

CVE-2024-7667 affects SourceCodester Car Driving School Management System 1.0, specifically the delete_users function in User.php. The vulnerability arises from improper handling of the id argument, enabling SQL injection. Exploitation can be performed remotely, and public disclosures exist. Conn...

PT-2024-38305

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Realtime Quiz System version 1.0 Description A critical issue was found in the SourceCodester Simple Realtime Quiz System, affecting the /manage user.php file. The manipulation of the id argument leads to SQL injection...

PT-2024-38232

Name of the Vulnerable Software and Affected Versions SourceCodester Lot Reservation Management System version 1.0 Description A critical issue has been found in the SourceCodester Lot Reservation Management System, affecting some unknown functionality of the file /admin/manage user.php. The...

PT-2024-38236

Name of the Vulnerable Software and Affected Versions SourceCodester Establishment Billing Management System version 1.0 Description A critical issue was found in the system, affecting an unknown function of the file /manage user.php. The manipulation of the id argument leads to SQL injection. It...

PT-2024-38161

Name of the Vulnerable Software and Affected Versions SourceCodester Complaints Report Management System version 1.0 Description A critical issue was found in the system, affecting the file /admin/manage user.php. The manipulation of the id argument leads to SQL injection. The attack can be...

CVE-2024-6732 SourceCodester Student Study Center Desk Management System Users.php sql injection

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. This vulnerability affects unknown code of the file /sscdms/classes/Users.php?f=save. The manipulation of the argument id leads to sql injection. The attack can be initiated remotel...

PT-2024-32979

Name of the Vulnerable Software and Affected Versions Kashipara College Management System version 1.0 Description A critical issue has been found in the processing of the file delete user.php, where the manipulation of the id argument leads to SQL injection. This issue can be exploited remotely...

PT-2024-32910

Name of the Vulnerable Software and Affected Versions Campcodes Online Laundry Management System version 1.0 Description A critical issue was found in the system, affecting some unknown functionality of the file /manage user.php. The manipulation of the id argument leads to SQL injection. This...

CVE-2024-28320: Authorization Bypass Through User-Controlled Key

Insecure Direct Object References IDOR vulnerability in Hospital Management System 1.0 allows attackers to manipulate user parameters for unauthorized access and modifications via crafted POST request to /patient/edit-user.php...

CVE-2024-33247

Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php...

CVE-2024-33247: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php...

PT-2024-23682 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS version 4.8 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the ID parameter in the SEMCMS User.php component. Recommendations: For SEMCMS version 4.8, avoid using the ID parameter ...

CVE-2024-28556

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin-manage-user.php...

CVE-2024-28556

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin-manage-user.php...

PT-2024-22459

Name of the Vulnerable Software and Affected Versions Sourcecodester php task management system version 1.0 Description The issue allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted payload to the "admin-manage-user.php" endpoint...

CVE-2024-28556: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin-manage-user.php...

PT-2024-26464

Name of the Vulnerable Software and Affected Versions Campcodes Church Management System version 1.0 Description A critical issue affects the processing of the file /admin/admin user.php, where the manipulation of the firstname argument leads to sql injection. The attack can be initiated remotely...

CVE-2024-3315 SourceCodester Computer Laboratory Management System user.php sql injection

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file classes/user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...