5 matches found
CVE-2024-2534
A vulnerability, which was classified as critical, was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This affects an unknown part of the file /admin/users.php. The manipulation of the argument userid leads to sql injection. It is possible to initiate the attack remotely. T...
PT-2023-22877 · Unknown · Campcodes Retro Cellphone Online Store
Name of the Vulnerable Software and Affected Versions: Campcodes Retro Cellphone Online Store version 1.0 Description: A critical vulnerability has been found in the software. The issue is related to an unknown function of the file /admin/modal add product.php, where the manipulation of the...
USN-2857-2 linux-lts-vivid vulnerability
Nathan Williams discovered that overlayfs in the Linux kernel incorrectly handled setattr operations. A local unprivileged attacker could use this to create files with administrative permission attributes and execute arbitrary code with elevated privileges...
multitheftauto 0.5 - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/14941/info MultiTheftAuto is prone to multiple vulnerabilities. The following issues were identified: The first issue can allow an attacker to gain unauthorized access to an administrative file. The second issue can allow...
My Guest Book (myGuestBk) Multiple Vulnerabilities
The remote web server is hosting myGuestBook. This installation comes with an administrative file in 'myguestBk/admin/index.asp' which lets any user delete old entries. In addition to this, this CGI is vulnerable to a cross-site-scripting attack. %NASLMINLEVEL 70300 C Tenable Network Security, In...