PT-2024-16250 · Sourcecodester · Sourcecodester Petrol Pump Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Petrol Pump Management Software version 1.0 Description: A critical issue was found in the software, affecting the /admin/edit customer.php file. The manipulation of the id argument leads to SQL injection. This issue can be...

CVE-2024-10298

A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an unknown part of the file /admin/edit-card-detail.php of the component Managecard Edit Card Detail Page. The manipulation of the argument editid leads to sql injection. It is...

PT-2024-31929

Name of the Vulnerable Software and Affected Versions PHPGurukul Hospital Management System version 4.0 Description The issue concerns multiple Cross Site Scripting XSS vulnerabilities. These vulnerabilities exist in the PHPGurukul Hospital Management System via the docname parameter in...

CVE-2024-46238: Improper Neutralization of Input During Web Page Generation

Multiple Cross Site Scripting XSS vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the docname parameter in /admin/add-doctor.php and /admin/edit-doctor.php...

PHPGurukul Boat Booking System SQL注入漏洞

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul Boat Booking System version 1.0, which originates in the /admin/edit-subadmin.php page of the Edit Subdomain Details Page component, where sadminusername/fullname/...

CVE-2024-9322

A vulnerability was found in code-projects Supply Chain Management 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/editmanufacturer.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploi...

PT-2024-39571 · Unknown · Code-Projects Supply Chain Management

Name of the Vulnerable Software and Affected Versions: code-projects Supply Chain Management version 1.0 Description: A critical issue has been found in the code-projects Supply Chain Management software. The problem is related to an unknown function in the file /admin/edit manufacturer.php, wher...

PT-2024-38959 · Unknown · Campcodes Supplier Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Supplier Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/edit area.php. The manipulation of the id argument leads to SQL injection. This...

CVE-2024-42771

A Stored Cross Site Scripting XSS vulnerability was found in " /admin/editroomcontroller.php" of the Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via "roomname" parameter...

PT-2024-30144 · Unknown · Kashipara Hotel Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Hotel Management System version 1.0 Description: An Incorrect Access Control issue was found in the /admin/edit room controller.php file, allowing an unauthenticated attacker to edit valid hotel room entries in the administrator...

PT-2024-30142 · Unknown · Kashipara Hotel Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Hotel Management System version 1.0 Description: A Stored Cross Site Scripting XSS issue was found in the "/admin/edit room controller.php" endpoint of the Kashipara Hotel Management System, allowing remote attackers to execute...

Kliqqi CMS 安全漏洞

Kliqqi CMS Pligg CMS is Kliqqi open source a content management system . Kliqqi CMS v2.0.2 version of the cross-site request forgery vulnerability , the vulnerability stems from /admin/editpage.php?linkid=1 does not adequately verify that the request is from a trusted user , an attacker can use...

PT-2024-30057 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was found in Pligg CMS. The vulnerability can be exploited via the /admin/edit page.php endpoint, specifically when the link id parameter is set to 1. This allows an...

CVE-2024-6169

The Unlimited Elements For Elementor Free Widgets, Addons, Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘username’ parameter in all versions up to, and including, 1.5.112 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2024-3767

A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. This vulnerability affects unknown code of the file /admin/edit-post.php. The manipulation of the argument posttitle/category leads to sql injection. The attack can be initiated remotely. The exploit has been disclose...

CVE-2024-3767: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. This vulnerability affects unknown code of the file /admin/edit-post.php. The manipulation of the argument posttitle/category leads to sql injection. The attack can be initiated remotely. The exploit has been disclose...

PHPGurukul News Portal SQL注入漏洞

PHPGurukul News Portal is a news portal from PHPGurukul Inc. An injection vulnerability exists in PHPGurukul News Portal version 4.1, which stems from the parameter posttitle in the file /admin/edit-post.php that can lead to SQL injection...

Prison Management System SQL注入漏洞

Prison Management System is a prison management system developed by Carlo Montero, an individual developer. A SQL injection vulnerability exists in SourceCodester Prison Management System version 1.0, which originates in the /Admin/editprofile.php file and can be exploited for SQL injection attac...

PT-2024-25857 · Unknown · Sourcecodester Prison Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A critical issue has been found in the SourceCodester Prison Management System, affecting an unknown functionality of the file /Admin/edit profile.php. This issue leads to sql...

CVE-2024-3419

A vulnerability has been found in SourceCodester Online Courseware 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/edit.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit ha...