CVE-2023-47460

SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /DiscoveryProcess/Service/Admin.svc/getGridColumnStructure component...

CVE-2023-51810

SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted request to the search parameter in the Users module...

PT-2024-19507 · Unknown · Budget/Expense Tracker System

Name of the Vulnerable Software and Affected Versions: Budget and Expense Tracker System version 1.0 Description: The issue is related to SQL Injection. It can be exploited via the "/expense budget/admin/?page=reports/budget&date start=2023-12-28&date end=" endpoint. The date start and date end...

CVE-2024-0543

A vulnerability classified as critical has been found in CodeAstro Real Estate Management System up to 1.0. This affects an unknown part of the file propertydetail.php. The manipulation of the argument pid leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2024-0526

A vulnerability classified as critical was found in CXBSoft Url-shorting up to 1.3.1. This vulnerability affects unknown code of the file /pages/shorttolong.php of the component HTTP POST Request Handler. The manipulation of the argument shorturl leads to sql injection. The exploit has been...

CXBSoft Url-shorting SQL Injection Vulnerability

CXBSoft Url-shorting is CXBSoft open source a can shorten the URL to get the library . CXBSoft Url-shorting 1.3.1 version of the previous SQL injection vulnerability , the vulnerability stems from /pages/longsshort.php file longurl parameter SQL injection vulnerability...

PT-2024-15644 · Unknown · Codeastro Real Estate Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Real Estate Management System versions up to 1.0 Description: A critical vulnerability has been found in the CodeAstro Real Estate Management System. This issue affects an unknown part of the file propertydetail.php. The manipulatio...

PT-2024-15641 · Cxbsoft · Cxbsoft Post-Office

Name of the Vulnerable Software and Affected Versions: CXBSoft Post-Office version 1.0 Description: A critical issue was found in the HTTP POST Request Handler component, specifically in the /admin/pages/update go.php file. The manipulation of the version argument leads to sql injection. The issu...

CXBSoft Url-shorting SQL Injection Vulnerability

CXBSoft Url-shorting is CXBSoft open source a can shorten the URL to get the library . CXBSoft Url-shorting 1.3.1 version of the previous SQL injection vulnerability , the vulnerability stems from /pages/shorttolong.php file longurl parameter SQL injection vulnerability...

PT-2024-15636 · Cmseasy · Cmseasy

Name of the Vulnerable Software and Affected Versions: CmsEasy versions up to 7.7.7 Description: A critical issue was found in the function getslide child action in the library lib/admin/language admin.php. The manipulation of the argument sid leads to sql injection. The attack can be launched...

PT-2024-15637 · Unknown · Cxbsoft Url-Shorting

Name of the Vulnerable Software and Affected Versions: CXBSoft Url-shorting versions up to 1.3.1 Description: A critical issue affects some unknown functionality of the file index.php. The manipulation of the url argument leads to sql injection. The exploit has been disclosed to the public. The...

CVE-2024-0494

A vulnerability, which was classified as critical, was found in Kashipara Billing Software 1.0. This affects an unknown part of the file materialbill.php of the component HTTP POST Request Handler. The manipulation of the argument itemtypeid leads to sql injection. It is possible to initiate the...

CVE-2024-0485

A vulnerability, which was classified as critical, was found in code-projects Fighting Cock Information System 1.0. Affected is an unknown function of the file admin/pages/tables/addcon.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...

CVE-2024-0480

A vulnerability was found in Taokeyun up to 1.0.5. It has been declared as critical. Affected by this vulnerability is the function index of the file application/index/controller/m/Drs.php of the component HTTP POST Request Handler. The manipulation of the argument cid leads to sql injection. The...

PT-2024-15596 · Taokeyun · Taokeyun

Name of the Vulnerable Software and Affected Versions: Taokeyun versions up to 1.0.5 Description: A critical issue has been found, affecting the function login of the file application/index/controller/m/User.php in the HTTP POST Request Handler component. The manipulation of the username argument...

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in Kashipara Billing Software version 1.0, which stems from a SQL injection vulnerability in the partyname of the partysubmit.php file...

PT-2024-15600 · Taokeyun · Taokeyun

Name of the Vulnerable Software and Affected Versions: Taokeyun versions up to 1.0.5 Description: A critical issue was found in the HTTP POST Request Handler component, specifically affecting the function index of the file application/index/controller/app/Task.php. The manipulation of the cid...

PT-2024-15614 · Unknown · Campcodes Simple Student Information System

Name of the Vulnerable Software and Affected Versions: Campcodes Student Information System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /classes/Users.php?f=save. The manipulation of the username argument leads to sql injection...

Online Lawyer Management System SQL Injection Vulnerability

Online Lawyer Management System is an online lawyer management system. A security vulnerability exists in version 1.0 of the Online Lawyer Management System, which stems from a parameter experience in the file searchLawyer.php that can lead to SQL injection...

SourceCodester House Rental Management System SQL Injection Vulnerability

House Rental Management System is a house rental management system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in version 1.0 of the SourceCodester House Rental Management System, which stems from a vulnerability in the manageuser.php file...