Lucene search
K

630 matches found

Positive Technologies
Positive Technologies
added 2024/11/07 12:0 a.m.2 views

PT-2024-16685 · Unknown · Codezips Online Institute Management System

Name of the Vulnerable Software and Affected Versions: Codezips Online Institute Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /manage website.php. The manipulation of the website image argument leads to unrestricted...

8.8CVSS7.4AI score0.00074EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2024/11/07 12:0 a.m.2 views

PT-2024-16684 · Codezips · Codezips Hospital Appointment System

Name of the Vulnerable Software and Affected Versions: Codezips Hospital Appointment System version 1.0 Description: A critical issue has been found in the processing of the file /editBranchResult.php, where the manipulation of the ID argument leads to SQL injection. The attack can be initiated...

9.8CVSS8.1AI score0.00106EPSS
Exploits1References12
OSV
OSV
added 2024/11/04 8:15 p.m.1 views

CVE-2024-10791

A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /doctorAction.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit...

9.8CVSS5.7AI score0.00104EPSS
Exploits1References4
NVD
NVD
added 2024/11/04 8:15 p.m.6 views

CVE-2024-10791

A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /doctorAction.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit...

9.8CVSS0.00104EPSS
Exploits1References4
CVE
CVE
added 2024/11/04 7:31 p.m.41 views

CVE-2024-10791

Codezips Hospital Appointment System 1.0 is affected by a SQL injection in the /doctorAction.php handler, triggered by manipulating the Name argument. Exploitation can be remote, and multiple sources label the issue as CRITICAL with publicly disclosed exploits. Connected reports consistently note...

9.8CVSS7.7AI score0.00104EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/11/04 7:31 p.m.13 views

CVE-2024-10791 Codezips Hospital Appointment System doctorAction.php sql injection

A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /doctorAction.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit...

7.5CVSS0.00104EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/11/04 7:31 p.m.7 views

CVE-2024-10791 Codezips Hospital Appointment System doctorAction.php sql injection

A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /doctorAction.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit...

7.5CVSS7.5AI score0.00104EPSS
Exploits1References4
OSV
OSV
added 2024/11/04 6:15 p.m.2 views

CVE-2024-10766

A vulnerability, which was classified as critical, has been found in Codezips Free Exam Hall Seating Management System 1.0. This issue affects some unknown processing of the file /pages/saveuser.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated...

9.8CVSS5.5AI score0.00227EPSS
Exploits1References4
NVD
NVD
added 2024/11/04 6:15 p.m.11 views

CVE-2024-10766

A vulnerability, which was classified as critical, has been found in Codezips Free Exam Hall Seating Management System 1.0. This issue affects some unknown processing of the file /pages/saveuser.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated...

9.8CVSS0.00227EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/11/04 5:31 p.m.12 views

CVE-2024-10766 Codezips Free Exam Hall Seating Management System save_user.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Codezips Free Exam Hall Seating Management System 1.0. This issue affects some unknown processing of the file /pages/saveuser.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated...

6.5CVSS6.8AI score0.00227EPSS
Exploits1References4
CVE
CVE
added 2024/11/04 5:31 p.m.37 views

CVE-2024-10766

Codezips Free Exam Hall Seating Management System 1.0 contains a vulnerability in the handling of the image parameter in /pages/save_user.php, where manipulation of the image argument leads to unrestricted file upload. This CVE is described as critical and can be exploited remotely; multiple sour...

9.8CVSS6.7AI score0.00227EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/11/04 5:31 p.m.17 views

CVE-2024-10766 Codezips Free Exam Hall Seating Management System save_user.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Codezips Free Exam Hall Seating Management System 1.0. This issue affects some unknown processing of the file /pages/saveuser.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated...

6.5CVSS0.00227EPSS
Exploits1References4
NVD
NVD
added 2024/11/04 4:15 p.m.11 views

CVE-2024-10764

A vulnerability classified as critical has been found in Codezips Online Institute Management System 1.0. This affects an unknown part of the file /pages/saveuser.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...

9.8CVSS0.00209EPSS
Exploits1References4
OSV
OSV
added 2024/11/04 4:15 p.m.1 views

CVE-2024-10765

A vulnerability classified as critical was found in Codezips Online Institute Management System up to 1.0. This vulnerability affects unknown code of the file /profile.php. The manipulation of the argument oldimage leads to unrestricted upload. The attack can be initiated remotely. The exploit ha...

9.8CVSS5.5AI score0.00209EPSS
Exploits1References4
NVD
NVD
added 2024/11/04 4:15 p.m.14 views

CVE-2024-10765

A vulnerability classified as critical was found in Codezips Online Institute Management System up to 1.0. This vulnerability affects unknown code of the file /profile.php. The manipulation of the argument oldimage leads to unrestricted upload. The attack can be initiated remotely. The exploit ha...

9.8CVSS0.00209EPSS
Exploits1References4
OSV
OSV
added 2024/11/04 4:15 p.m.1 views

CVE-2024-10764

A vulnerability classified as critical has been found in Codezips Online Institute Management System 1.0. This affects an unknown part of the file /pages/saveuser.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...

9.8CVSS5.5AI score
Exploits0References4
Cvelist
Cvelist
added 2024/11/04 3:31 p.m.14 views

CVE-2024-10765 Codezips Online Institute Management System profile.php unrestricted upload

A vulnerability classified as critical was found in Codezips Online Institute Management System up to 1.0. This vulnerability affects unknown code of the file /profile.php. The manipulation of the argument oldimage leads to unrestricted upload. The attack can be initiated remotely. The exploit ha...

6.5CVSS0.00209EPSS
Exploits1References4
CVE
CVE
added 2024/11/04 3:31 p.m.39 views

CVE-2024-10765

Codezips Online Institute Management System (up to 1.0) has a vulnerability in /profile.php where manipulating the old_image parameter enables unrestricted upload. This remote vector is documented across multiple sources (NVD, Red Hat, CVE lists) and is described as a critical issue; exploitation...

9.8CVSS6.9AI score0.00209EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2024/11/04 3:31 p.m.44 views

CVE-2024-10764

Codezips Online Institute Management System 1.0 contains a critical vulnerability in /pages/save_user.php where manipulating the image parameter enables unrestricted file upload. The issue is remotely exploitable and has been publicly disclosed. Reported details consistently identify the vulnerab...

9.8CVSS6.8AI score0.00209EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/11/04 3:31 p.m.15 views

CVE-2024-10764 Codezips Online Institute Management System save_user.php unrestricted upload

A vulnerability classified as critical has been found in Codezips Online Institute Management System 1.0. This affects an unknown part of the file /pages/saveuser.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...

6.5CVSS0.00209EPSS
Exploits1References4
Rows per page
Query Builder