CVE-2023-33677

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...

PT-2024-12765 · Vanderbilt · Redcap

Name of the Vulnerable Software and Affected Versions: Vanderbilt REDCap versions prior to 13.8.0 Description: A SQL injection issue allows a remote attacker to obtain sensitive information via the password reset mechanism in the MyCapMobileApp/update.php endpoint, specifically through the passwo...

CVE-2023-49969

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customersupport/index.php?page=editcustomer...

CVE-2023-49968

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customersupport/managedepartment.php...

CVE-2023-49970

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /customersupport/ajax.php?action=saveticket...

Customer Support System security vulnerabilities

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a SQL injection vulnerability that originates from...

Online Tours & Travels Management System SQL Injection Vulnerability

Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. SourceCodester Online Tours & Travels Management System version 1.0 suffers from a SQL injection vulnerability in the parameter status in file /admin/operations/expensecategory.php...

CVE-2024-25847

SQL Injection vulnerability in MyPrestaModules "Product Catalog CSV, Excel Import" simpleimportproduct modules for PrestaShop versions 6.5.0 and before, allows attackers to escalate privileges and obtain sensitive information via Send::construct and importProducts::addDataToDb methods...

Online Mobile Store Management System SQL Injection Vulnerability

Online Mobile Store Management System is an online mobile store management system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in version 1.0 of the Online Mobile Store Management System, which stems from an SQL injection issue in the...

CVE-2024-2073

A vulnerability has been found in SourceCodester Block Inserter for Dynamic Content 1.0 and classified as critical. This vulnerability affects unknown code of the file viewpost.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2024-2067

A vulnerability was found in SourceCodester Computer Inventory System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-computer.php. The manipulation of the argument computer leads to sql injection. The attack can be initiated remotely. T...

FAQ Management System SQL Injection Vulnerability

FAQ Management System is a Frequently Asked Questions Management System by Remy Andrade Personal Developer. A SQL injection vulnerability exists in version 1.0 of the FAQ Management System, which stems from the parameter faq in the file /endpoint/delete-faq.php, which can lead to SQL injection...

PT-2024-18686 · Sourcecodester · Sourcecodester Petrol Pump Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Petrol Pump Management Software version 1.0 Description: A critical issue was found in the software, affecting the /admin/edit supplier.php file. The manipulation of the id argument leads to SQL injection. The attack can be...

parse-server security vulnerability

parse-server is an open source Backend-as-a-Service BaaS framework that is primarily used for application backend processing. A security vulnerability exists in parse-server versions prior to 6.5.0 and prior to 7.0.0 that stems from the presence of a SQL injection vulnerability...

Zoo Management System /zms/admin/changeimage.php File SQL Injection Vulnerability

Zoo Management System is a zoo management system. Zoo Management System has a SQL injection vulnerability that originates from a SQL injection vulnerability in the editid parameter of the /zms/admin/changeimage.php file, no details of the vulnerability are available at this time...

Web-Based Student Clearance System SQL Injection Vulnerability

Web-Based Student Clearance System is a web-based student clearance system by the individual developer Ndueso Okorie. A SQL injection vulnerability exists in Web-Based Student Clearance System version 1.0, which stems from an incorrect manipulation of the parameter Fullname that can lead to sql...

PT-2024-18470 · WordPress · Wpvivid

Name of the Vulnerable Software and Affected Versions: Migration, Backup, Staging – WPvivid plugin for WordPress versions up to, and including, 0.9.68 Description: The issue is related to a missing capability check on the get restore progress and restore functions, allowing unauthorized access...

CVE-2024-25867

A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the membershipType and membershipAmount parameters in the addtype.php component...

PT-2024-20896 · Unknown · Phpgurukul Zoo Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Zoo Management System version 1.0 Description: The issue is related to a SQL Injection vulnerability in the /zms/admin/edit-ticket.php file. This vulnerability can be exploited via the tickettype and tprice parameters...

PT-2024-14295 · Unknown · Simple Student Attendance System

Name of the Vulnerable Software and Affected Versions: Simple Student Attendance System version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the "student form.php" and "class form.php" pages. This enables the attacker t...