110 matches found
CVE-2024-37803
Multiple stored cross-site scripting XSS vulnerabilities in CodeProjects Health Care hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname and lname parameters under the Staff Info page...
CVE-2024-37799
CodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the reservid parameter at viewreservations.php...
CVE-2024-37799
CodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the reservid parameter at viewreservations.php...
CVE-2024-37800
CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Date parameter at index.php...
CVE-2024-37802
The CodeProjects Health Care hospital Management System v1.0 is vulnerable to a SQL injection vulnerability within the Patient Info module . The flaw is triggered via the searvalu parameter. While the technical impact is significant, there is no specific patch currently available. To mitigate ris...
PT-2024-27760 · Unknown · Codeprojects Health Care Hospital Management System
Name of the Vulnerable Software and Affected Versions: CodeProjects Health Care hospital Management System version 1.0 Description: The issue is related to a SQL injection vulnerability in the Patient Info module. This vulnerability is exploited via the searvalu parameter. Recommendations: For...
CVE-2024-37799
CodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the reservid parameter at viewreservations.php...
CVE-2024-38347
CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Room Information module via the id parameter...
CVE-2024-38347
CodeProjects Health Care hospital Management System v1.0 has a SQL injection vulnerability in the Room Information module via the id parameter. The CVSS metrics indicate remote, unauthenticated access with low complexity and high impact to confidentiality, integrity, and availability. Root cause ...
CVE-2024-37802
CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Patient Info module via the searvalu parameter...
CVE-2024-38348: Improper Neutralization of Special Elements used in an SQL Command
CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu parameter...
CVE-2024-37802
CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Patient Info module via the searvalu parameter...
CVE-2024-37803
Multiple stored cross-site scripting XSS vulnerabilities in CodeProjects Health Care hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname and lname parameters under the Staff Info page...
CVE-2024-38348
CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu parameter...
CVE-2024-37799
The CodeProjects Restaurant Reservation System v1.0 is vulnerable to a SQL injection vulnerability. The flaw originates from the improper neutralization of special elements used in an SQL command within the reserv_id parameter at the view_reservations.php endpoint. Exploitation of this vulnerabil...
CVE-2024-38347: Improper Neutralization of Special Elements used in an SQL Command
CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Room Information module via the id parameter...
CVE-2024-38348
CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Staff Info module via the searvalu parameter...
CVE-2024-37800
CodeProjects Restaurant Reservation System v1.0 is affected by a reflected cross-site scripting (XSS) vulnerability triggered via the Date parameter in index.php. The issue is documented across multiple sources (CVE-2024-37800; NVD; CNNVD; CVELIST; PT-2024-27759; vulnrichment) and is described as...
CVE-2024-37800: Improper Neutralization of Input During Web Page Generation
CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Date parameter at index.php...
CVE-2024-37802: Improper Neutralization of Special Elements used in an SQL Command
CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Patient Info module via the searvalu parameter...