CVE-2024-37799: Improper Neutralization of Special Elements used in an SQL Command

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the reservid parameter at viewreservations.php...

CodeProjects Restaurant Reservation System SQL Injection Vulnerability

CodeProjects Restaurant Reservation System is a Php based restaurant reservation system. A SQL injection vulnerability exists in CodeProjects Restaurant Reservation System v1.0, which originates from a SQL injection in the reservid parameter of viewreservations.php...

CVE-2024-38348

CodeProjects Health Care hospital Management System v1.0 contains a SQL injection vulnerability in the Staff Info module reachable via the searvalu parameter. The issue is documented across multiple sources (NVD, CVE list, CNNVD, PT-Security, etc.) with the vulnerability impacting the Staff Info ...

CVE-2024-37803: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting XSS vulnerabilities in CodeProjects Health Care hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname and lname parameters under the Staff Info page...

CVE-2024-37803

Multiple stored cross-site scripting XSS vulnerabilities in CodeProjects Health Care hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname and lname parameters under the Staff Info page...

CVE-2024-37803

CVE-2024-37803 affects CodeProjects Health Care hospital Management System v1.0. The vulnerability is a stored XSS in the Staff Info page, where crafted payloads injected into fname and lname can execute arbitrary web scripts/HTML. Reported across NVD entries with CVSSv3.1 base metrics of 5.4 (Me...

CodeProjects Restaurant Reservation System Cross-Site Scripting Vulnerability

CodeProjects Restaurant Reservation System is a Php based restaurant reservation system. A cross-site scripting vulnerability exists in CodeProjects Restaurant Reservation System v1.0, which originates from a cross-site scripting vulnerability in the Date parameter of index.php...

CVE-2024-37799

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the reservid parameter at viewreservations.php...

PT-2024-27757 · Unknown · Code-Projects Restaurant Reservation System

Name of the Vulnerable Software and Affected Versions: CodeProjects Restaurant Reservation System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the reserv id parameter at the "view reservations.php" endpoint. Recommendation...

CVE-2023-5471

A vulnerability, which was classified as critical, was found in codeprojects Farmacia 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument usario/senha leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

Sql injection

A vulnerability, which was classified as critical, was found in codeprojects Farmacia 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument usario/senha leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

CVE-2023-5471 codeprojects Farmacia index.php sql injection

A vulnerability, which was classified as critical, was found in codeprojects Farmacia 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument usario/senha leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

CVE-2023-5471

Affected software: codeprojects Farmacia 1.0. The vulnerability is in an unknown function of index.php where the usario/senha parameter is manipulated to cause SQL injection. The issue can be exploited remotely and exploitation details have been disclosed. The available documents do not specify a...

CVE-2023-5471 codeprojects Farmacia index.php sql injection

A vulnerability, which was classified as critical, was found in codeprojects Farmacia 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument usario/senha leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

PT-2023-32126 · Unknown · Code-Projects Farmacia

Name of the Vulnerable Software and Affected Versions: codeprojects Farmacia version 1.0 Description: A critical issue was found in the code, affecting an unknown function of the file index.php. The manipulation of the usario/senha argument leads to sql injection. It is possible to launch the...

Out-of-bounds

A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The...

CVE-2023-0918 codeprojects Pharmacy Management System Avatar Image add.php unrestricted upload

A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The...

CVE-2023-0918

CVE-2023-0918 affects codeprojects Pharmacy Management System 1.0, specifically the Avatar Image Handler’s add.php. The issue is unrestricted file upload due to missing validation, enabling remote code execution via uploaded files. Several sources confirm public exploitation and a high-impact pro...

PT-2023-16618 · Unknown · Code-Projects Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Pharmacy Management System version 1.0 Description: A critical issue has been found in the Avatar Image Handler component of the file add.php, leading to unrestricted upload. The attack can be initiated remotely. The issue affect...

CVE-2022-3130

A vulnerability classified as critical has been found in codeprojects Online Driving School. This affects an unknown part of the file /login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...