PT-2024-24422

Name of the Vulnerable Software and Affected Versions Realtyna Organic IDX plugin versions through 4.14.4 Description The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows for potential exploitation by injecting...

PT-2024-27720 · Unknown · Phpgurukul Student Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Record System version 3.20 Description: A critical issue has been found in the PHPGurukul Student Record System, affecting an unknown functionality of the file "manage-courses.php?del=1". The manipulation of the del argumen...

CVE-2024-3698

A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file managepayment.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. T...

PT-2024-24416 · WordPress · Shopping Cart & Ecommerce Store

Name of the Vulnerable Software and Affected Versions: The Shopping Cart & eCommerce Store plugin for WordPress versions up to, and including, 5.6.3 Description: The issue arises from insufficient escaping on the user-supplied productid attribute of the ec addtocart shortcode and lack of sufficie...

WordPress WP Activity Log Premium plugin <= 4.6.4 - Authenticated (Subscriber+) SQL Injection vulnerability

Authenticated Subscriber+ SQL Injection vulnerability discovered by 1337Wannabe in WordPress Plugin WP Activity Log Premium versions = 4.6.4...

CVE-2024-3618

A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected is an unknown function of the file /control/activatecase.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

Advocate Office Management System SQL注入漏洞

Advocate Office Management System is an office management system by the individual developer mayurik. A SQL injection vulnerability exists in Advocate Office Management System version 1.0, which originates from a SQL injection vulnerability in the file /control/registercase.php...

PT-2024-24186 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Loan Management System version 1.0 Description: The issue concerns SQL Injection via the password parameter in the "login.php" file. This allows for potential unauthorized access to sensitive data. There is no information...

PT-2024-26922 · Sourcecodester · Kortex Lite Advocate Office Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /control/adds.php. The manipulation of the name, gender, dob,...

WordPress Plugin User Activity Log SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers, and the WordPress plugin is an...

PT-2024-26448 · Unknown · Campcodes Church Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Church Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file /admin/index.php. The manipulation of the password argument leads to SQL injection. It is possible to...

CVE-2024-1990

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to blind SQL Injection via the ‘id’ parameter of the RMForm shortcode in all versions up to, and including, 5.3.1.0 due to insufficient escaping on the user supplied...

WordPress CodeisAwesome AIKit plugin <= 4.14.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ivan Spiridonov Patchstack Alliance in WordPress Plugin AIKit versions = 4.14.1...

PT-2024-19866 · WordPress · The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin

Name of the Vulnerable Software and Affected Versions: The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress versions up to, and including, 1.6.7.7 Description: The issue allows authenticated attackers with contributor access or higher to perform SQL...

PT-2024-24126 · Unknown · Sourcecodester Online Graduate Tracer System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Graduate Tracer System version 1.0 Description: The issue concerns SQL Injection via the id parameter in the admin/admin cs.php file. This allows for potential exploitation by injecting malicious SQL code. Recommendation...

Online Graduate Tracer System SQL注入漏洞

Online Graduate Tracer System is an online graduate tracer system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Sourcecodester Online Graduate Tracer System v1.0, which originates from the id parameter in admin/admincs.php, which is susceptible to SQL injectio...

PT-2024-22229 · WordPress · Network Summary Plugin For Wordpress

Name of the Vulnerable Software and Affected Versions: Network Summary plugin for WordPress versions up to and including 2.0.11 Description: The issue allows for SQL Injection via the category parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation...

PT-2024-19869 · Themefusion · Avada

Name of the Vulnerable Software and Affected Versions: Avada theme for WordPress versions up to, and including, 7.11.6 Description: The issue allows authenticated attackers with editor-level access and above to perform SQL Injection via the entry parameter due to insufficient escaping on the...

CVE-2024-3455

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/addpostlogin.php. The manipulation of the argument SingleLoginId leads to sql injection. The attack can b...

PT-2024-26069 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Laundry Management System version 1.0 Description: A critical issue has been found in the SourceCodester Laundry Management System. The laporan filter function of the file /application/controller/Transaki.php is affected. The...