CVE-2024-5357: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Zoo Management System 2.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely...

CVE-2024-5046: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Examination System 1.0. It has been rated as critical. This issue affects some unknown processing of the file registeracc.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2024-2770: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/contact-us.php. The manipulation of the argument email leads to sql injection. The attack may be...

CVE-2024-1830

CVE-2024-1830 affects code-projects Library System 1.0. The vulnerable component is the file Source/librarian/user/student/lost-password.php, where the manipulation of the email parameter leads to an SQL injection. The issue can be exploited remotely and the exploit has been disclosed publicly. R...

CVE-2023-5695

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file pagesresetpwd.php. The manipulation of the argument email with the input testing%40example.com'%26%25alert9860 leads to...

CVE-2023-5695: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file pagesresetpwd.php. The manipulation of the argument email with the input testing%40example.com'%26%25 leads to cross site...

CVE-2023-5693: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in CodeAstro Internet Banking System 1.0 and classified as critical. This issue affects some unknown processing of the file pagesresetpwd.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2023-5373: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is the function register of the file Master.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-5271

CVE-2023-5271 affects SourceCodester Best Courier Management System v1.0, where the file edit_parcel.php exposes a SQL injection via the email parameter in an unknown functionality. The root cause is improper input handling in the edit_parcel.php routine, enabling attacker-controlled SQL executio...

CVE-2023-3534: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file checkavailability.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...

Cross site scripting

A vulnerability was found in EELV Newsletter Plugin 2.x on WordPress. It has been rated as problematic. Affected by this issue is the function stylenewsletter of the file lettreinfo.php. The manipulation of the argument email leads to cross site scripting. The attack may be launched remotely. The...

CVE-2023-2207

A vulnerability classified as critical was found in Campcodes Retro Basketball Shoes Online Store 1.0. This vulnerability affects unknown code of the file contactus1.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2023-2206: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Campcodes Retro Basketball Shoes Online Store 1.0. This affects an unknown part of the file contactus.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

PT-2023-17434 · Unknown · Campcodes Video Sharing Website

Name of the Vulnerable Software and Affected Versions: Campcodes Video Sharing Website version 1.0 Description: A critical issue has been found, affecting the admin class.php file, where manipulation of the email argument leads to SQL injection. This can be initiated remotely. Recommendations: Fo...

CVE-2023-2043: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as problematic, was found in Control iD RHiD 23.3.19.0. This affects an unknown part of the file /v2/customerdb/operator.svc/a of the component Edit Handler. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack...

PT-2023-16729 · Sourcecodester · Sourcecodester Doctors Appointment System

Name of the Vulnerable Software and Affected Versions: SourceCodester Doctors Appointment System version 1.0 Description: A critical issue was found in the Parameter Handler component of the file /admin/add-new.php, where the manipulation of the email argument leads to sql injection. This issue c...

CVE-2023-0516: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file user/forgetpassword.php of the component Parameter Handler. The manipulation of the argument email leads to sql injection. The...

CVE-2023-0324: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/page-login.php. The manipulation of the argument email leads to sql injection. The attack may be launched...

PT-2022-11740 · Unknown · Dhbw Fallstudie

Name of the Vulnerable Software and Affected Versions: DHBW Fallstudie affected versions not specified Description: A critical issue was found in DHBW Fallstudie, affecting an unknown functionality of the file app/config/passport.js in the Login component. The manipulation of the id/email argumen...

CVE-2022-2656: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Multi Language Hotel Management Software. Affected is an unknown function. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...