49 matches found
CVE-2025-14643
The connected CNVD/CNNVD/Red Hat/CE CVE entries confirm a SQL injection vulnerability in code-projects Simple Attendance Record System 2.0, originating from an unknown function in /check.php where the student parameter is mishandled. This allows remote exploitation and, per sources, the exploit h...
PT-2025-51142
Name of the Vulnerable Software and Affected Versions Simple Attendance Record System version 2.0 Description A flaw exists in Simple Attendance Record System 2.0 where manipulation of the student argument in the /check.php file can lead to SQL injection. This issue affects an unknown function...
EUVD-2017-0070
Malware in sbrugna...
EUVD-2019-9327
Malware in sbrugna...
Daily Expense Manager User Enumeration Vulnerability
Daily Expense Manager is a daily expense management system. Daily Expense Manager suffers from a user enumeration vulnerability that stems from the unvalidated parameter name in the file /check.php, no details of the vulnerability are available at this time...
Alibaba Cloud Linux 3 : 0108: GNOME (ALINUX3-SA-2022:0108)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0108 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2018-20337: There is a stack-based...
CVE-2024-7195
A vulnerability was found in itsourcecode Society Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/checkadmin.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The explo...
PT-2024-38157 · Unknown · Itsourcecode Society Management System
Name of the Vulnerable Software and Affected Versions: itsourcecode Society Management System version 1.0 Description: A critical issue has been found in the itsourcecode Society Management System. The problem is related to an unknown function in the file /admin/check admin.php, where the...
The vulnerability of the /view/vpn/autovpn/online_check.php file in the Ruijie RG-UAC router micro-programming software allows a perpetrator to execute any command they desire.
The vulnerability of the /view/vpn/autovpn/onlinecheck.php file in the Ruijie RG-UAC router microprogramming software exists due to the failure to address the special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...
CVE-2024-3931
A vulnerability was found in Totara LMS up to 18.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin/roles/check.php of the component User Selector. The manipulation of the argument ID Number leads to cross site scripting. The attack may be...
PT-2024-24638 · Sourcecodester · Sourcecodester Internship Portal Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Internship Portal Management System. This issue affects an unknown part of the file admin/check admin.ph...
PT-2024-15480 · Soxft · Soxft Timemail
Name of the Vulnerable Software and Affected Versions: soxft TimeMail versions up to 1.1 Description: A critical issue has been found in soxft TimeMail, affecting some unknown functionality of the file check.php. The manipulation of the argument c leads to sql injection. The exploit has been...
TimeMail SQL Injection Vulnerability
TimeMail is an application about TimeMail by soxft individual developer. A SQL injection vulnerability exists in TimeMail version 1.1, which stems from the parameter c in the file check.php that causes SQL injection...
Kashipara Food Management System SQL注入漏洞
Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in version 1.0 of the Kashipara Food Management System, which is caused by a lack of validation of externally entered SQL statements in the password parameter of the loginCheck.php...
PT-2023-22076 · Unknown · Nfine Rapid Development Platform
Name of the Vulnerable Software and Affected Versions: NFine Rapid Development Platform version 20230511 Description: A problematic issue has been found, affecting an unknown function of the file /Login/CheckLogin, which leads to the use of a weak hash. This issue can be exploited remotely, but t...
SUSE CVE-2019-19725
sysstat through 12.2.0 has a double free in checkfileactlst in sacommon.c...
The vulnerability of the check_file_record function in the NTFS file system, which allows a malicious actor to execute arbitrary code with elevated privileges through the FUSE NTFS-3G module.
The vulnerability of the checkfilerecord function in the NTFS file system relates to buffer overflow in dynamic memory. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code with elevated privileges using a specially crafted NTFS file system...
CVE-2020-22206
SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliateck.php...