4858 matches found
CVE-2024-1826 code-projects Library System login.php sql injection
A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file Source/librarian/user/student/login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated...
Sql injection
A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file policeadd.php. The manipulation of the argument policename/policeid/policespec/password leads to sql injection. The exploit has been disclos...
CVE-2024-1821 code-projects Crime Reporting System police_add.php sql injection
A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file policeadd.php. The manipulation of the argument policename/policeid/policespec/password leads to sql injection. The exploit has been disclos...
CVE-2024-1820
CVE-2024-1820 affects code-projects Crime Reporting System 1.0, specifically inchargelogin.php. The vulnerability arises from unsafely handling the email and password parameters, enabling SQL injection. It is exploitable remotely and an exploit has been disclosed publicly. Multiple sources (NVD, ...
PT-2024-18343 · Unknown · Code-Projects Library System
Name of the Vulnerable Software and Affected Versions: code-projects Library System version 1.0 Description: A critical issue has been found in the code-projects Library System, affecting an unknown function of the file Source/librarian/user/teacher/registration.php. The manipulation of the...
CVE-2024-1830: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched...
CVE-2024-1829: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file Source/librarian/user/student/registration.php. The manipulation of the argument email/regno/phone/username leads to sql injectio...
CVE-2024-1828: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Library System 1.0. It has been classified as critical. Affected is an unknown function of the file Source/librarian/user/teacher/registration.php. The manipulation of the argument email/idno/phone/username leads to sql injection. It is possible to launc...
CVE-2024-1827: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Library System 1.0 and classified as critical. This issue affects some unknown processing of the file Source/librarian/user/teacher/login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely...
CVE-2024-1826: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file Source/librarian/user/student/login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated...
CVE-2024-25251
The code-projects Agro-School Management System version 1.0 is vulnerable to Incorrect Access Control (CWE-284). This flaw allows for potential unauthorized actions due to improper permission enforcement within the management system. The severity is rated as HIGH with a CVSS 3.1 score of 8.8 , in...
CVE-2024-25251
code-projects Agro-School Management System 1.0 is suffers from Incorrect Access Control...
Task Manager SQL Injection Vulnerability
Task Manager is a Code-Projects open source task manager application . Task Manager v1.0 SQL injection vulnerability , the vulnerability stems from the file / TaskManager / EditTask.php SQL injection vulnerability...
Task Manager Cross-Site Scripting Vulnerability
Task Manager is an open source task manager application from Code-Projects. Task Manager v1.0 suffers from a cross-site scripting vulnerability that originates from a cross-site scripting XSS vulnerability in the file /TaskManager/Tasks.php...
Task Manager SQL Injection Vulnerability
Task Manager is an open source task manager application from Code-Projects. Task Manager v1.0 has a SQL injection vulnerability , the vulnerability stems from the file /TaskManager/EditProject.php has a SQL injection vulnerability...
CVE-2024-25318
Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'pid' parameter in Hotel/admin/print.php?pid=2...
CVE-2024-25318
Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'pid' parameter in Hotel/admin/print.php?pid=2...
CVE-2024-25307
Code-projects Cinema Seat Reservation System 1.0 allows SQL Injection via the 'id' parameter at "/Cinema-Reservation/booking.php?id=1."...