13 matches found
CVE-2024-12947
A vulnerability was found in Codezips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /invo.php. The manipulation of the argument dname leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2021-31470
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2024-12947
A vulnerability was found in Codezips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /invo.php. The manipulation of the argument dname leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2024-12947
creationtimestamp| type| source ---|---|--- 2024-12-26 10:38:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113718691299726941 2024-12-26 11:15:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le7dv3zlii25 2024-12-26 13:13:39+00:00| seen|...
CVE-2024-12947 Codezips Hospital Management System invo.php sql injection
A vulnerability was found in Codezips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /invo.php. The manipulation of the argument dname leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2024-12947 Codezips Hospital Management System invo.php sql injection
A vulnerability was found in Codezips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /invo.php. The manipulation of the argument dname leads to sql injection. The attack may be launched remotely. The exploit has been...
CVE-2020-12947
CVE-2020-12947 is rejected/not used and does not represent an active vulnerability entry.
CVE-2021-31470
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2021-31470
CVE-2021-31470 affects Foxit Reader 10.1.1.37576. The issue is a parsing/use-after-free in handling of U3D objects within PDFs, caused by not validating the existence of an object before performing operations. This can enable remote code execution with the current process context when a user visi...
CVE-2017-12947
classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in an untrash action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators...
CVE-2017-12947
The CVE-2017-12947 entry corresponds to the WordPress Easy Modal plugin (versions before 2.1.0). The vulnerability is an SQL injection in the untrash action via wp-admin/admin.php, exploitable by administrators. Affected component: classes\controller\admin\modals.php. The available sources descri...