CVE-2024-2943

A vulnerability has been found in Campcodes Online Examination System 1.0 and classified as critical. This vulnerability affects unknown code of the file /adminpanel/admin/query/deleteExamExe.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. Th...

CVE-2024-2934

A vulnerability classified as critical was found in SourceCodester Todo List in Kanban Board 1.0. Affected by this vulnerability is an unknown functionality of the file /endpoint/delete-todo.php. The manipulation of the argument list leads to sql injection. The attack can be launched remotely. Th...

PT-2024-23180 · Unknown · Code-Projects Online Book System

Name of the Vulnerable Software and Affected Versions: code-projects Online Book System version 1.0 Description: A critical issue was found in the code-projects Online Book System, affecting an unknown function of the file /description.php. The manipulation of the ID argument leads to SQL...

PT-2024-23282 · Unknown · Contest Gallery

Name of the Vulnerable Software and Affected Versions: Contest Gallery versions prior to 21.3.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential unauthorized access and...

Online Book System SQL Injection Vulnerability

Online Book System is an online booking system. A SQL injection vulnerability exists in version 1.0 of Online Book System, which originates from a lack of validation of externally entered SQL statements in the username/password/loginusername/loginpassword parameters of the /index.php file. An...

PT-2024-23179 · Unknown · Code-Projects Online Book System

Name of the Vulnerable Software and Affected Versions: code-projects Online Book System version 1.0 Description: A critical issue has been found in the processing of the file /Product.php, where the manipulation of the argument value leads to sql injection. The attack may be initiated remotely. T...

Todo List in Kanban Board SQL Injection Vulnerability

Todo List in Kanban Board is a to-do list for rems personal developers. Todo List in Kanban Board version 1.0 suffers from a SQL injection vulnerability in the list parameter of the /endpoint/delete-todo.php file...

PT-2024-22864 · Sourcecodester · Sourcecodester Todo List In Kanban Board

Name of the Vulnerable Software and Affected Versions: SourceCodester Todo List in Kanban Board version 1.0 Description: A critical issue was found in the software, affecting an unknown functionality of the file "/endpoint/delete-todo.php". The manipulation of the list argument leads to SQL...

Complete Online Beauty Parlor Management System /contact-us.php File SQL Injection Vulnerability

Complete Online Beauty Parlor Management System is an online beauty parlor management system. The Complete Online Beauty Parlor Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the email parameter of the...

House Rental Management System SQL Injection Vulnerability

House Rental Management System is a house rental management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Campcodes House Rental Management System version 1.0, which originates from a SQL injection vulnerability in the parameter username in the file ajax.php...

PT-2024-22889 · Unknown · Campcodes Online Examination System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Examination System version 1.0 Description: A critical issue was found in the system, affecting the file /adminpanel/admin/query/deleteQuestionExe.php. The manipulation of the id argument leads to SQL injection. This issue ca...

PT-2024-21762

Name of the Vulnerable Software and Affected Versions CIGESv2 affected versions not specified Description The issue is related to a SQL injection vulnerability in the CIGESv2 system. This vulnerability can be exploited through the /ajaxSubServicios.php endpoint, specifically in the idServicio...

CVE-2024-29872

SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/empscreening/add, 'agencyids' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the data from it...

CVE-2024-29875

SQL injection vulnerability in Sentrifugo 3.2, through /sentrifugo/index.php/default/reports/exportactiveuserrpt, 'sortname' parameter. The exploitation of this vulnerability could allow a remote user to send a specially crafted query to the server and extract all the data from it...

CVE-2024-2015

A vulnerability, which was classified as critical, has been found in ZhiCms 4.0. This issue affects the function getindexdata of the file app/index/controller/mcontroller.php. The manipulation of the argument key leads to sql injection. The attack may be initiated remotely. The exploit has been...

PT-2024-22018 · Unknown · Campcodes Online Marriage Registration System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Marriage Registration System version 1.0 Description: A critical vulnerability was found in the Campcodes Online Marriage Registration System. This issue affects unknown code in the file /user/search.php. The manipulation of...

PT-2024-23097 · Unknown · Sentrifugo

Name of the Vulnerable Software and Affected Versions: Sentrifugo version 3.2 Description: A SQL injection vulnerability exists, allowing a remote user to send a specially crafted query to the server and extract all the data from it. This issue is related to the...

Sentrifugo SQL Injection Vulnerability

Sentrifugo is a human resource management system. The system includes functions for human resources management, performance appraisal, recruitment management and asset management. A SQL injection vulnerability exists in Sentrifugo version 3.2, which originates from the lack of validation of...

Sentrifugo SQL Injection Vulnerability

Sentrifugo is a human resource management system. The system includes functions for human resources management, performance appraisal, recruitment management and asset management. A SQL injection vulnerability exists in Sentrifugo version 3.2, which stems from a missing id parameter in the...

Online Marriage Registration System SQL Injection Vulnerability

Online Marriage Registration System is a website builder that supports online marriage registration. A SQL injection vulnerability exists in Campcodes Online Marriage Registration System version 1.0, which originates from a SQL injection vulnerability in the searchdata parameter of the...