396 matches found
CVE-2024-11817
A vulnerability was found in PHPGurukul User Registration & Login and User Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be...
1000 Projects Beauty Parlour Management System 注入漏洞
1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which stems from the parameter username in the file /admin/index.php that can cause...
PT-2024-16866 · Unknown · 1000 Projects Beauty Parlour Management System
Name of the Vulnerable Software and Affected Versions: 1000 Projects Beauty Parlour Management System version 1.0 Description: A critical issue was found in the 1000 Projects Beauty Parlour Management System. The manipulation of the username argument leads to SQL injection in the file...
CVE-2024-51065
Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter...
CVE-2024-44812
SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the username and password parameters in the /admin.index.php component...
CVE-2024-44871
An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted file...
moziloCMS 安全漏洞
moziloCMS is a content management system CMS in the moziloCMS open source. A security vulnerability exists in moziloCMS version v3.0, which stems from an arbitrary file upload vulnerability in component /admin/index.php that allows an attacker to execute arbitrary code by uploading a crafted file...
CVE-2024-33965
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'view' in...
CVE-2024-7497
A vulnerability was found in itsourcecode Airline Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...
PT-2024-38387 · Unknown · Airline Reservation System
Name of the Vulnerable Software and Affected Versions: Airline Reservation System version 1.0 Description: A critical issue affects the processing of the file /admin/index.php, where the manipulation of the page argument leads to file inclusion. This can be initiated remotely. Recommendations: Fo...
CVE-2024-7320
A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affects an unknown part of the file /admin/index.php of the component Admin Login. The manipulation of the argument user leads to sql injection. It is possible to initiate the attac...
CVE-2024-41109
Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Navigating to "/admin/index/statistics" with a logged in Pimcore user exposes information about the Pimcore installation, PHP version, MYSQL version, installed bundles and all database tables and their row count in the...
CVE-2024-41109: Exposure of Sensitive Information to an Unauthorized Actor
Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Navigating to /admin/index/statistics with a logged in Pimcore user exposes information about the Pimcore installation, PHP version, MYSQL version, installed bundles and all database tables and their row count in the...
CVE-2024-5985
A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
PT-2024-37294 · Unknown · Sourcecodester Best Online News Portal
Name of the Vulnerable Software and Affected Versions: SourceCodester Best Online News Portal version 1.0 Description: A critical vulnerability has been found in the software, affecting an unknown part of the file /admin/index.php. The manipulation of the username argument leads to SQL injection...
Online Fire Reporting System ofrs/admin/index.php File SQL Injection Vulnerability
Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from a lack of validation of external input SQL statements in ofrs/admin/index.php. The vulnerability can be exploited by an attacker to...
CVE-2024-34987
A SQL Injection vulnerability exists in the ofrs/admin/index.php script of PHPGurukul Online Fire Reporting System 1.2. The vulnerability allows attackers to bypass authentication and gain unauthorized access by injecting SQL commands into the username input field during the login process...
PHPGurukul Online Fire Reporting System 安全漏洞
Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from a lack of validation of external input SQL statements in ofrs/admin/index.php. The vulnerability can be exploited by an attacker to...
PT-2024-26276 · Unknown · Phpgurukul Online Fire Reporting System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A SQL Injection issue exists in the ofrs/admin/index.php script, allowing attackers to bypass authentication and gain unauthorized access by injecting SQL commands into the...