PT-2024-15636 · Cmseasy · Cmseasy

Name of the Vulnerable Software and Affected Versions: CmsEasy versions up to 7.7.7 Description: A critical issue was found in the function getslide child action in the library lib/admin/language admin.php. The manipulation of the argument sid leads to sql injection. The attack can be launched...

CXBSoft Url-shorting SQL Injection Vulnerability

CXBSoft Url-shorting is CXBSoft open source a can shorten the URL to get the library . CXBSoft Url-shorting 1.3.1 version of the previous SQL injection vulnerability , the vulnerability stems from /pages/shorttolong.php file longurl parameter SQL injection vulnerability...

PT-2024-15637 · Unknown · Cxbsoft Url-Shorting

Name of the Vulnerable Software and Affected Versions: CXBSoft Url-shorting versions up to 1.3.1 Description: A critical issue affects some unknown functionality of the file index.php. The manipulation of the url argument leads to sql injection. The exploit has been disclosed to the public. The...

CVE-2024-0494

A vulnerability, which was classified as critical, was found in Kashipara Billing Software 1.0. This affects an unknown part of the file materialbill.php of the component HTTP POST Request Handler. The manipulation of the argument itemtypeid leads to sql injection. It is possible to initiate the...

CVE-2024-0485

A vulnerability, which was classified as critical, was found in code-projects Fighting Cock Information System 1.0. Affected is an unknown function of the file admin/pages/tables/addcon.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...

CVE-2024-0480

A vulnerability was found in Taokeyun up to 1.0.5. It has been declared as critical. Affected by this vulnerability is the function index of the file application/index/controller/m/Drs.php of the component HTTP POST Request Handler. The manipulation of the argument cid leads to sql injection. The...

PT-2024-15596 · Taokeyun · Taokeyun

Name of the Vulnerable Software and Affected Versions: Taokeyun versions up to 1.0.5 Description: A critical issue has been found, affecting the function login of the file application/index/controller/m/User.php in the HTTP POST Request Handler component. The manipulation of the username argument...

PT-2024-15600 · Taokeyun · Taokeyun

Name of the Vulnerable Software and Affected Versions: Taokeyun versions up to 1.0.5 Description: A critical issue was found in the HTTP POST Request Handler component, specifically affecting the function index of the file application/index/controller/app/Task.php. The manipulation of the cid...

Online Lawyer Management System SQL Injection Vulnerability

Online Lawyer Management System is an online lawyer management system. A security vulnerability exists in version 1.0 of the Online Lawyer Management System, which stems from a parameter experience in the file searchLawyer.php that can lead to SQL injection...

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in Kashipara Billing Software version 1.0, which stems from a SQL injection vulnerability in the partyname of the partysubmit.php file...

PT-2024-15614 · Unknown · Campcodes Simple Student Information System

Name of the Vulnerable Software and Affected Versions: Campcodes Student Information System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /classes/Users.php?f=save. The manipulation of the username argument leads to sql injection...

Fighting Cock Information System security breach

Fighting Cock Information System is a chicken information system by chrisjelo individual developer. The code-projects Fighting Cock Information System version 1.0 has a security vulnerability that stems from an SQL injection vulnerability in the /admin/action/editchicken.php file...

SourceCodester House Rental Management System SQL Injection Vulnerability

House Rental Management System is a house rental management system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in version 1.0 of the SourceCodester House Rental Management System, which stems from a vulnerability in the manageuser.php file...

CVE-2023-51978

In PHPGurukul Art Gallery Management System v1.1, "Update Artist Image" functionality of "imageid" parameter is vulnerable to SQL Injection...

Blood Bank & Donor Management SQL Injection Vulnerability

Blood Bank & Donor Management is a blood bank and donor management system. Blood Bank & Donor Management version 5.6 suffers from a SQL injection vulnerability that originates from a flaw in the /admin/request-received-bydonar.php file...

Art Gallery Management System 安全漏洞

Art Gallery Management System is an art gallery management system. Art Gallery Management System v1.1 suffers from a SQL injection vulnerability that originates from the application's lack of validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute...

PT-2024-15594 · Unknown · Code-Projects Fighting Cock Information System

Name of the Vulnerable Software and Affected Versions: code-projects Fighting Cock Information System version 1.0 Description: A critical issue has been found in the code-projects Fighting Cock Information System, affecting unknown code of the file /admin/action/update-deworm.php. The manipulatio...

Weitong Mall SQL Injection Vulnerability

Weitong Mall is a shopping mall system developed by fuyanglipengjun. A SQL injection vulnerability exists in Weitong Mall version 1.0.0, which originates from platform-shopsrcmain. The vulnerability is caused by an unknown function in platform-shopsrcmain.esourcescomplatformdaoOrderDao.xml, which...

PT-2024-15576 · Unknown · Blood Bank & Donor Management

Name of the Vulnerable Software and Affected Versions: Blood Bank & Donor Management version 5.6 Description: A critical issue has been found in the software, affecting unknown code of the file /admin/request-received-bydonar.php. This leads to sql injection. The attack can be initiated remotely...

Human Resource Integrated System SQL Injection Vulnerability

Human Resource Integrated System is a human resource integration system. A SQL injection vulnerability exists in code-projects Human Resource Integrated System version 1.0, which stems from a SQL injection vulnerability in the /adminroute/incservicecredits.php file...