PT-2024-39379

Name of the Vulnerable Software and Affected Versions code-projects Blood Bank Management System version 1.0 Description A critical issue was found in the Admin Login component of the system, affecting an unknown part of the file /admin/login.php. The manipulation of the username and password...

SourceCodester Best House Rental Management System has security vulnerabilities

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester, Inc. A security vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which is caused by an SQL injection in the parameters firstname/lastname/email...

PT-2024-39365 · Unknown · Code-Projects Crud Operation System

Name of the Vulnerable Software and Affected Versions: code-projects Crud Operation System version 1.0 Description: A critical issue was found in the code-projects Crud Operation System. The problem lies in an unknown function of the file updata.php, where the manipulation of the sid argument lea...

PT-2024-30841 · Unknown · Super Store Finder

Name of the Vulnerable Software and Affected Versions: Super Store Finder versions prior to 6.9.8 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially enabling...

Inventory Management viewProduct.php File SQL Injection Vulnerability

Inventory Management is an inventory management system. Inventory Management suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter id of the file /model/viewProduct.php. An attacker can exploit this vulnerability to...

WordPress Adicon Server plugin <= 1.2 - Admin+ SQL Injection vulnerability

Admin+ SQL Injection vulnerability discovered by Sumit Patel in WordPress Plugin Adicon Server versions = 1.2...

WordPress LearnPress plugin <= 4.2.7 - Unauthenticated SQL Injection via 'c_fields' vulnerability

Unauthenticated SQL Injection via 'cfields' vulnerability discovered by abrahack in WordPress Plugin LearnPress versions = 4.2.7...

CVE-2024-8709

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is the function deleteuser/saveuser of the file /adminclass.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-32840

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

WordPress plugin LearnPress has a SQL injection vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

Ivanti Endpoint Manager SQL Injection Vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti USA. An SQL injection vulnerability exists in Ivanti Endpoint Manager. An attacker exploiting this vulnerability could remotely execute code...

PT-2024-37823 · WordPress · Ai Engine

Name of the Vulnerable Software and Affected Versions: The AI Engine WordPress plugin versions prior to 2.4.8 Description: The issue is related to a SQL injection that occurs due to improper sanitization and escaping of a parameter in a SQL statement. This can be exploited by admin users when...

PT-2024-39189 · Sourcecodester · Sourcecodester Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best House Rental Management System version 1.0 Description: A critical vulnerability has been found in the system. The issue affects the function delete user/save user of the file /admin class.php. The manipulation of the...

PT-2024-39185 · Unknown · Shandong Star Measurement/Control Equipment Heating Network Wireless Monitoring System

Name of the Vulnerable Software and Affected Versions: Shandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System version 5.6.2 Description: A critical issue was found in the system, affecting the GetDataKindByType function of the file /DataSrvs/UCCGSrv.asmx. This...

Ivanti EPM security vulnerabilities

Ivanti EPM is a one-stop-shop for managing user profiles and all client devices from Ivanti, USA. A security vulnerability exists in Ivanti EPM that stems from the inclusion of an SQL injection vulnerability in the management console. An unauthenticated, remote attacker could exploit the...

CVE-2024-8570

A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /inccatadd.php. The manipulation of the argument title leads to sql injection. The attack may be launched remotely. The exploit ha...

CVE-2024-8567

A vulnerability, which was classified as critical, has been found in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletedeductions. The manipulation of the argument id leads to sql injection. The attack may be initiated...

Hospital Management System SQL Injection Vulnerability

Hospital Management System a hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from an unknown function in the file user-login.php, where manipulation of the parameter username can lead to SQL injection. An attacker can use this...

PT-2024-37962 · WordPress · Truebooker

Name of the Vulnerable Software and Affected Versions: The TrueBooker WordPress plugin versions prior to 1.0.3 Description: The issue is related to a SQL injection vulnerability. It occurs because the plugin does not properly sanitise and escape a parameter before using it in a SQL statement via ...

QNAP Systems Video Station SQL Injection Vulnerability

QNAP Systems Video Station is a video management and playback application from QNAP Systems. A SQL injection vulnerability exists in QNAP Systems Video Station version 5.8.1 2024/02/26 and earlier versions, which stems from the inclusion of a SQL injection vulnerability. An attacker could exploit...