CVE-2024-6196

A vulnerability was found in itsourcecode Banking Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file adminclass.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit h...

CVE-2024-6192

A vulnerability classified as critical was found in itsourcecode Loan Management System 1.0. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The explo...

CVE-2024-5522

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...

PT-2024-37455 · Sourcecodester · Sourcecodester Food Ordering Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Food Ordering Management System versions up to 1.0 Description: A critical issue has been found in the SourceCodester Food Ordering Management System, affecting the file login.php of the Login Panel. The manipulation of the...

PT-2024-27719 · Unknown · Datalife Engine

Name of the Vulnerable Software and Affected Versions: DataLife Engine versions prior to 17.1 Description: The issue is related to SQL Injection in the dboption component. Recommendations: For versions prior to 17.1, consider restricting access to the dboption component to minimize the risk of...

WordPress Plugin Custom Field Suite SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop pkcustomlinks 2.3 and earlier versions, which stems from the presenc...

Health Care hospital Management System SQL Injection Vulnerability

Health Care hospital Management System is an open source health care hospital management system from Code-Projects. A SQL injection vulnerability exists in Health Care hospital Management System v1.0, which originates from a cross-site scripting vulnerability in the searvalu parameter of the...

Pool of Bethesda Online Reservation System SQL Injection Vulnerability

Pool of Bethesda Online Reservation System is a swimming pool online reservation system by janobe individual developer. A SQL injection vulnerability exists in Pool of Bethesda Online Reservation System version 1.0, which stems from a parameter email in the file login.php that can lead to SQL...

PT-2024-27951 · Unknown · Codeprojects Health Care Hospital Management System

Name of the Vulnerable Software and Affected Versions: CodeProjects Health Care hospital Management System version 1.0 Description: The issue is related to a SQL injection vulnerability in the Staff Info module. This vulnerability can be exploited via the searvalu parameter. Recommendations: For...

Arbitrary File Creation

Overview opencart/opencart is a shopping cart system Affected versions of this package are vulnerable to Arbitrary File Creation. An Arbitrary File Creation issue was identified via the database restoration functionality. By injecting PHP code into the database, an attacker with admin privileges...

Online Book Store Security Breach

Online Book Store is an online bookstore by the individual developer Arvin Arandilla. A security vulnerability exists in Online Book Store v1.0, which originates from a SQL injection vulnerability that allows local attackers to execute arbitrary code via the admindelete.php component...

CVE-2024-6039 Feng Office Workspaces sql injection

A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affected is an unknown function of the component Workspaces. The manipulation of the argument dim leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

PT-2024-37338 · Unknown · Itsourcecode Farm Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Gym Management System version 1.0 Description: A critical issue was found in the itsourcecode Gym Management System, affecting an unknown functionality of the file manage user.php. The manipulation of the id argument leads to SQL...

Laundry Management System SQL Injection Vulnerability

Laundry Management System is a laundry management system. A SQL injection vulnerability exists in itsourcecode Online Laundry Management System version 1.0, which stems from adminclass.php containing an unknown function that causes SQL injection via the parameter id...

PT-2024-37319 · Unknown · Itsourcecode Online Laundry Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Laundry Management System version 1.0 Description: A critical issue has been found in the itsourcecode Online Laundry Management System, affecting some unknown functionality of the file admin class.php. The manipulation of...

CVE-2024-36597

Aegon Life v1.0 was discovered to contain a SQL injection vulnerability via the clientid parameter at clientStatus.php...

PT-2024-27774 · Itsourcecode · Itsourcecode Payroll Management System

Name of the Vulnerable Software and Affected Versions: Itsourcecode Payroll Management System version 1.0 Description: The issue is related to SQL Injection in the payroll items.php file via the ID parameter. This allows for potential exploitation. Recommendations: For Itsourcecode Payroll...

CVE-2024-3922 Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection

The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all versions up to, and including, 3.10.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

PT-2024-37287 · Sourcecodester · Sourcecodester Employee/Visitor Gate Pass Logging System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description: A critical issue was found in the log employee function of the /classes/Master.php file, where the manipulation of the employee code argument leads to SQL...