Aplaya Beach Resort Online Reservation System SQL Injection Vulnerability

Aplaya Beach Resort Online Reservation System is the online room reservation system of Aplaya Beach Resort. SourceCodester Aplaya Beach Resort Online Reservation System version 1.0 has a SQL injection vulnerability that originates from a SQL injection in the categ/end parameter of the...

CVE-2023-36645

SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer function...

Computer Laboratory Management System SQL Injection Vulnerability

Computer Laboratory Management System is a computer laboratory management system. A SQL injection vulnerability exists in SourceCodester Computer Laboratory Management System version 1.0, which originates from a SQL injection vulnerability in the parameter id of file...

Projeqtor SQL injection vulnerability

Projeqtor is an open source PHP-based project management software from the Projeqtor community. The software is used to organize various functions required for multiple projects and is suitable for IT projects. An SQL injection vulnerability exists in Projeqtor version 11.2.0 and earlier, which...

PT-2024-25134 · Sourcecodester · Sourcecodester Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Laboratory Management System version 1.0 Description: A critical issue was found in the SourceCodester Computer Laboratory Management System, affecting an unknown function of the file classes/user.php. The manipulation...

PT-2024-23855 · Unknown · Instantcms

Name of the Vulnerable Software and Affected Versions: InstantCMS version 2.16.2 Description: A SQL injection issue affects the application, allowing an attacker with administrative privileges to execute unauthorized SQL code. The vulnerability exists in the index chart data action, which receive...

PT-2024-24627 · Sourcecodester · Sourcecodester Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Laboratory Management System version 1.0 Description: A critical issue affects some unknown functionality of the file "/admin/?page=borrow/view borrow". The manipulation of the id argument leads to SQL injection. The...

PT-2024-24701 · Sourcecodester · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue was found in the SourceCodester Internship Portal Management System. The problem affects the file admin/add activity.php, where the manipulation of t...

SQL Injection Vulnerability in the Internship Portal Management System

Internship Portal Management System is an internship portal management system by the individual developer ChatikoboL. A SQL injection vulnerability exists in Internship Portal Management System version 1.0, which originates from a SQL injection vulnerability in the title/description/start/end...

SourceCodester Task Management System SQL Injection Vulnerability

SourceCodester Task Management System is a task management system. A SQL injection vulnerability exists in SourceCodester Task Management System version 1.0, which originates from a SQL injection vulnerability in the taskid parameter of the file task-details.php...

PT-2024-24659 · Unknown · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue has been found in the SourceCodester Internship Portal Management System, affecting the processing of the file admin/edit admin.php. The manipulation...

Daily Habit Tracker 1.0 - Stored Cross-Site Scripting (XSS)

Exploit Title: Daily Habit Tracker 1.0 - Stored Cross-Site Scripting XSS Date: 2 Feb 2024 Exploit Author: Yevhenii Butenko Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/17118/daily-habit-tracker-using-php-and-mysql-source-code.html Version: 1.0...

PT-2024-24460 · Sourcecodester · Sourcecodester Php Task Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester PHP Task Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester PHP Task Management System. This issue affects the file attendance-info.php and is related to the manipulation of the...

Daily Habit Tracker 1.0 Cross Site Scripting

Exploit Title: Daily Habit Tracker 1.0 - Stored Cross-Site Scripting XSS Date: 2 Feb 2024 Exploit Author: Yevhenii Butenko Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/17118/daily-habit-tracker-using-php-and-mysql-source-code.html Version: 1.0...

PT-2024-3163 · WordPress · Layerslider

Name of the Vulnerable Software and Affected Versions: LayerSlider plugin for WordPress versions 7.9.11 through 7.10.0 Description: The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls get popup markup action due to insufficient escaping on the user-supplied id parameter...

CVE-2024-30860

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/exportexceluser.php...

CVE-2024-25574

SQL injection vulnerability exists in GetDIAEusListParameters...

CVE-2024-30868

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addgetlogin.php...

NetentSec NS-ASG security vulnerability

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/edituserlogin.php file...

PT-2024-23464 · Whitestudio · Whitestudio Easy Form Builder

Name of the Vulnerable Software and Affected Versions: WhiteStudio Easy Form Builder versions 3.7.4 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by...