ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME, ZAM170-NF-1.8.25-7354-Ver1.0.0 – SQL injection vulnerabilities

ZkTeco OEM is an intelligent system from ZkTeco China. A SQL injection vulnerability exists in ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME, and ZAM170-NF-1.8.25-7354-Ver1.0.0 versions, which stems from the lack of certain protection mechanisms and allows an attacker to execute arbitrar...

PT-2024-12808 · Zkteco · Zkteco-Based Oem Devices

Name of the Vulnerable Software and Affected Versions: ZKTeco-based OEM devices versions ZAM170-NF-1.8.25-7354-Ver1.0.0 and possibly other Standalone service versions 2.1.6-20200907 and possibly others Description: An SQL Injection vulnerability exists in ZKTeco-based OEM devices due to improper...

CVE-2024-5112

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /view/studentprofile.php. The manipulation of the argument stdindex leads to sql injection. The attack can be initiated...

CVE-2024-5107

A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management System 1.0. This issue affects some unknown processing of the file /view/studentpaymentdetails2.php. The manipulation of the argument index leads to sql injection. The attack may be...

PT-2024-34523 · Campcodes · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /view/student payment invoice.php. The manipulation of the index argumen...

PT-2024-34543 · Sourcecodester · Sourcecodester Online Examination System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Examination System version 1.0 Description: A critical issue has been found in the SourceCodester Online Examination System, affecting some unknown functionality of the file save.php. The manipulation of the vote argumen...

Zoho ManageEngine ADAudit Plus security vulnerabilities

ZOHO ManageEngine ADAudit Plus is used by Zoho USA, Inc. to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in Zoho ManageEngine ADAudit Plus prior to version 7271, which stems from a vulnerability that allows SQL injection when fetching aggregated...

PT-2024-34536 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /view/teacher attendance history1.php. The manipulation of the index...

PT-2024-34513 · Campcodes · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue has been found in the processing of the file /view/student payment details2.php, where the manipulation of the index argument leads to SQL...

Campcodes Complete Web-Based School Management System security vulnerabilities

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which stems from a parameter grade in the file...

PT-2024-34460 · Sourcecodester · Sourcecodester Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best House Rental Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Best House Rental Management System, affecting the file login.php. The manipulation of the username and...

CVE-2024-5066

A vulnerability classified as critical was found in PHPGurukul Online Course Registration System 3.1. Affected by this vulnerability is an unknown functionality of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. The attack can be launched...

Online Course Registration SQL Injection Vulnerability

PHPGurukul Online Course Registration is a PHP and MySQL based online course registration system from PHPGurukul, Inc. A SQL injection vulnerability exists in PHPGurukul Online Course Registration System version 3.1, which originates from the parameter regno in the file /onlinecourse/ that can le...

Gas Agency Management System SQL Injection Vulnerability

Gas Agency Management System is a gas agency management software by Mayuri K. Individual developer. It is used to manage the daily operations of a gas agency. A SQL injection vulnerability exists in Gas Agency Management System version 1.0, which stems from a parameter id in the file edituser.php...

CVE-2024-4992

Vulnerability in SiAdmin 1.1 that allows SQL injection via the /modul/modkuliah/aksikuliah.php parameter in nim. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the system and retrieve all the information stored in it...

CVE-2024-4933

A vulnerability has been found in SourceCodester Simple Online Bidding System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /simple-online-bidding-system/admin/index.php?page=manageproduct. The manipulation of the argument id leads to sql...

CVE-2024-4931

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Online Bidding System 1.0. This issue affects some unknown processing of the file /simple-online-bidding-system/admin/index.php?page=viewudet. The manipulation of the argument id leads to sql injection. The...

PT-2024-33449 · Sourcecodester · Sourcecodester Simple Online Bidding System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Bidding System version 1.0 Description: A critical issue has been found in the processing of the file /simple-online-bidding-system/admin/index.php?page=view udet. The manipulation of the id argument leads to SQL...

Online Examination System SQL Injection Vulnerability

Projectworlds Online Examination System is an online examination system from Projectworlds India. A SQL injection vulnerability exists in Online Examination System version 1.0, which originates from /adminpanel/admin/query/addCourseExe.php contains unknown code that leads to SQL injection via the...

School Intramurals Student Attendance Management System Security Vulnerability

Student Attendance Management System is a student attendance management system. A security vulnerability exists in School Intramurals Student Attendance Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...