CVE-2024-7833 D-Link DI-8100 upgrade_filter.asp upgrade_filter_asp command injection

A vulnerability was found in D-Link DI-8100 16.07. It has been classified as critical. This affects the function upgradefilterasp of the file upgradefilter.asp. The manipulation of the argument path leads to command injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-7812

A vulnerability classified as problematic was found in SourceCodester Best House Rental Management System 1.0. This vulnerability affects unknown code of the file /rental0/rental/ajax.php?action=savetenant of the component POST Parameter Handler. The manipulation of the argument lastname leads to...

CVE-2024-7813

CVE-2024-7813 affects SourceCodester Prison Management System 1.0, specifically the Profile Image Handler via /uploadImage/Profile/. The issue arises from unknown processing of the profile image file, leading to credentials that are insufficiently protected. Exploitation is possible remotely and ...

CVE-2024-7811 SourceCodester Daily Expenses Monitoring App delete-expense.php sql injection

A vulnerability classified as critical has been found in SourceCodester Daily Expenses Monitoring App 1.0. This affects an unknown part of the file /endpoint/delete-expense.php. The manipulation of the argument expense leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-7810

CVE-2024-7810 affects SourceCodester Online Graduate Tracer System 1.0. The vulnerability is a SQL injection in the file /tracking/admin/view_itprofile.php, caused by manipulating the id parameter. It can be exploited remotely and, per disclosures, an exploit exists. No official patch/version upd...

CVE-2024-7808

A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown function of the file logindbc.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

CVE-2024-7797

A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. Affected is an unknown function of the file /simple-online-bidding-system/bidding/admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. It is...

CVE-2024-7800 SourceCodester Simple Online Bidding System ajax.php sql injection

A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file /simple-online-bidding-system/bidding/admin/ajax.php?action=deleteproduct. The manipulation of the argument id leads to sql injection. It is possible ...

CVE-2024-7799

SourceCodester Simple Online Bidding System 1.0 contains a vulnerability in the file /simple-online-bidding-system/bidding/admin/users.php that leads to improper authorization. The issue can be exploited remotely and a public exploit has been disclosed. Public remediation status is not confirmed ...

CVE-2024-7793

CVE-2024-7793 affects SourceCodester Task Progress Tracker 1.0. A vulnerability in the file /endpoint/add-task.php arises from unsafely handling the task_name parameter, enabling cross-site scripting. The issue is exploitable remotely and has been publicly disclosed. Multiple sources corroborate ...

CVE-2024-7753

SourceCodester Clinics Patient Management System 1.0 contains a vulnerability in the /user_images/ path that can be triggered remotely via an unauthorized direct request. The issue affects unknown code in that file, and the exploit has been disclosed publicly. CVSS context in the record indicates...

CVE-2024-7752

The CVE-2024-7752 vulnerability affects SourceCodester Clinics Patient Management System v1.0 in the update_medicine.php component, where manipulation of the medicine_name parameter enables cross-site scripting (XSS). Exploitation is actionable remotely, and public disclosures exist. No product v...

CVE-2024-7751

CVE-2024-7751 corresponds to a SQL injection in SourceCodester Clinics Patient Management System 1.0, caused by manipulation of the hidden_id parameter in the file /update_medicine.php. Connected documents corroborate a remotely launchable vulnerability with publicly disclosed exploit details. Af...

CVE-2024-7750

Concrete details found: CVE-2024-7750 affects SourceCodester Clinics Patient Management System 1.0, vulnerable through /medicines.php via the medicine_name parameter leading to SQL injection. The vulnerability is exploitable remotely and exploits have been disclosed publicly. Root cause is a SQL ...

CVE-2024-7739 yzane vscode-markdown-pdf cross site scripting

A vulnerability, which was classified as problematic, was found in yzane vscode-markdown-pdf 1.5.0. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

CVE-2024-7686

A vulnerability, which was classified as problematic, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part of the file registercase.php. The manipulation of the argument title/description/oppositelawyer leads to cross site scripting. It is...

CVE-2024-7684

A vulnerability classified as problematic was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected by this vulnerability is an unknown functionality of the file addact.php. The manipulation of the argument aname leads to cross site scripting. The attack can be...

CVE-2024-7683

A vulnerability classified as problematic has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected is an unknown function of the file addcasestage.php. The manipulation of the argument cname leads to cross site scripting. It is possible to launch the attack...

CVE-2024-7682

A vulnerability was found in code-projects Job Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file rwinat.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the publ...

CVE-2024-7682

A vulnerability was found in code-projects Job Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file rwinat.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the publ...