10442 matches found
PT-2024-38491 · Sourcecodester · Sourcecodester Car Driving School Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A critical issue affects the management of the file manage user.php, where the manipulation of the id argument leads to SQL injection. This issue may be initiated...
PT-2024-38494 · Sourcecodester · Sourcecodester Car Driving School Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A critical issue has been found in the SourceCodester Car Driving School Management System, affecting some unknown functionality of the file view package.php. The...
Kashipara Responsive School Management System security vulnerabilities
Kashipara Responsive School Management System is a school management system from Kashipara. A security vulnerability exists in Kashipara Responsive School Management System v1.0, which originates from a vulnerability to SQL injection attack that allows an attacker to execute arbitrary SQL command...
CVE-2024-41237
A SQL injection vulnerability in /smsa/teacherlogin.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter...
CVE-2024-34480
SourceCodester Computer Laboratory Management System 1.0 allows admin/category/viewcategory.php id SQL Injection...
USN-6946-1 python-django vulnerabilities
It was discovered that Django incorrectly handled certain strings in floatformat function. An attacker could possibly use this issue to cause a memory exhaustion. CVE-2024-41989 It was discovered that Django incorrectly handled very large inputs. An attacker could possibly use this issue to cause...
CVE-2024-33967
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'view' in 'Attendance' and 'YearLeve...
DEBIAN-CVE-2024-7009
Unsanitized user-input in Calibre = 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database...
CVE-2024-7499
A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file flights.php. The manipulation of the argument departureairportid leads to sql injection. The attack can be launched...
PT-2024-25601 · Payment · Payment
Name of the Vulnerable Software and Affected Versions: Payment software version 1.0 Description: The issue allows an attacker to exploit a SQL injection vulnerability by sending a specially crafted query to the server, potentially retrieving all stored information through the id parameter in the...
PayPal, Credit Card, and Debit Card Payment: SQL Injection Vulnerabilities
PayPal,Credit Card and Debit Card Payment is a PayPal, Credit Card and Debit Card Payment software by janobe individual developer. A SQL injection vulnerability exists in PayPal,Credit Card and Debit Card Payment version 1.0. An attacker can use this vulnerability to send a specially crafted quer...
Young Entrepreneur E-Negosyo System SQL Injection Vulnerability
Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System by janobe individual developers. A SQL injection vulnerability exists in Young Entrepreneur E-Negosyo System version 1.0. An attacker can use this vulnerability to send a specially crafted query to the server and retriev...
Bike Delivery System SQL Injection Vulnerability
Bike Delivery System is a bicycle delivery system. A SQL injection vulnerability exists in Bike Delivery System version 1.0 due to a parameter name that lacks validation of externally entered SQL statements. An attacker can use this vulnerability to execute illegal SQL commands to steal sensitive...
PT-2024-25592 · Unknown · Janobe Paypal/Card Payment
Name of the Vulnerable Software and Affected Versions: Janobe PayPal/Card Payment version 1.0 Description: A SQL injection issue affects the payment system, allowing an attacker to send a specially crafted query to the server and retrieve stored information through the end parameter in the...
PayPal, Credit Card, and Debit Card Payment: SQL Injection Vulnerabilities
PayPal,Credit Card and Debit Card Payment is a PayPal, Credit Card and Debit Card Payment software by janobe individual developer. A SQL injection vulnerability exists in PayPal,Credit Card and Debit Card Payment version 1.0. An attacker can use this vulnerability to send a specially crafted quer...
PT-2024-25590 · Unknown · E-Negosyo System
Name of the Vulnerable Software and Affected Versions: E-Negosyo System version 1.0 Description: The issue allows an attacker to exploit a SQL injection vulnerability by sending a specially crafted query to the server. This could lead to the retrieval of all information stored in the phonenumber...
CVE-2024-7451
A vulnerability was found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file applynow.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee...
PT-2024-38361 · Unknown · Itsourcecode Placement Management System
Name of the Vulnerable Software and Affected Versions: itsourcecode Placement Management System version 1.0 Description: A critical issue was found in the itsourcecode Placement Management System, affecting some unknown functionality of the file apply now.php. The manipulation of the id argument...
Ticket Reservation System SQL Injection Vulnerability
Ticket Reservation System is itsourcecode open source ticket reservation system. Ticket Reservation System version 1.0 has a SQL injection vulnerability , the vulnerability stems from the checkoutticketsave.php file data parameters contain a SQL injection vulnerability...
CVE-2024-7378
A vulnerability was found in SourceCodester Simple Realtime Quiz System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /managequestion.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploi...