PT-2025-4071 · Unknown · 1000 Projects Employee Task Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Employee Task Management System version 1.0 Description: A critical issue affects the /admin/AdminLogin.php file, where the manipulation of the email argument leads to sql injection. This issue can be initiated remotely. The...

needyamin 跨站脚本漏洞

needyamin is an open source library card borrowing system by needyamin. A cross-site scripting vulnerability exists in needyamin version 1.0, which stems from a cross-site scripting attack due to incorrect manipulation of the firstname/lastname/email/borrow/useraddress parameters...

1000 Projects Employee Task Management System SQL注入漏洞

1000 Projects Employee Task Management System is an open source employee task management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Employee Task Management System version 1.0, which is caused by SQL injection due to parameter email...

1000 Projects Employee Task Management System SQL注入漏洞

1000 Projects Employee Task Management System is an open source employee task management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Employee Task Management System version 1.0, which is caused by SQL injection due to parameter email...

needyamin SQL注入漏洞

needyamin is an open source library card borrowing system by needyamin. A SQL injection vulnerability exists in needyamin version 1.0, which stems from an incorrect manipulation of the email/password parameter that can lead to sql injection...

CVE-2024-56997

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting XSS in /doctor/index.php via the 'Email' parameter...

CVE-2024-56997

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting XSS in /doctor/index.php via the 'Email' parameter...

CVE-2024-56997

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting XSS in /doctor/index.php via the 'Email' parameter...

CVE-2024-56997

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting XSS in /doctor/index.php via the 'Email' parameter...

CVE-2024-56997

CVE-2024-56997 affects PHPGurukul Hospital Management System 4.0. The issue is a Cross-Site Scripting (XSS) vulnerability in the /doctor/index.php endpoint, exploitable via the Email parameter. The CVE metrics indicate a low to moderate impact in terms of confidentiality, integrity, and availabil...

CVE-2024-52294

Khoj is a self-hostable artificial intelligence app. Prior to version 1.29.10, an Insecure Direct Object Reference IDOR vulnerability in the updatesubscription endpoint allows any authenticated user to manipulate other users' Stripe subscriptions by simply modifying the email parameter in the...

CVE-2024-52294 khoj has an IDOR in subscription management that allows unauthorized subscription modifications

Khoj is a self-hostable artificial intelligence app. Prior to version 1.29.10, an Insecure Direct Object Reference IDOR vulnerability in the updatesubscription endpoint allows any authenticated user to manipulate other users' Stripe subscriptions by simply modifying the email parameter in the...

CVE-2024-52294 khoj has an IDOR in subscription management that allows unauthorized subscription modifications

Khoj is a self-hostable artificial intelligence app. Prior to version 1.29.10, an Insecure Direct Object Reference IDOR vulnerability in the updatesubscription endpoint allows any authenticated user to manipulate other users' Stripe subscriptions by simply modifying the email parameter in the...

CVE-2024-52294

Khoj’s CVE-2024-52294 describes an IDOR in the update_subscription endpoint (GET/PATCH to /api/subscription) where an email parameter directly references user subscriptions without ownership checks. Any authenticated user could modify other users’ Stripe subscriptions by altering email, potential...

Authorization Bypass Through User-Controlled Key

Overview khoj is a Your Second Brain Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key through the updatesubscription endpoint. An authenticated attacker can modify other users' Stripe subscriptions by manipulating the email parameter in the...

khoj has an IDOR in subscription management allows unauthorized subscription modifications

Summary An Insecure Direct Object Reference IDOR vulnerability in the updatesubscription endpoint allows any authenticated user to manipulate other users' Stripe subscriptions by simply modifying the email parameter in the request. Details The vulnerability exists in the subscription endpoint at...

GHSA-HQ4H-W933-JM6C khoj has an IDOR in subscription management allows unauthorized subscription modifications

Summary An Insecure Direct Object Reference IDOR vulnerability in the updatesubscription endpoint allows any authenticated user to manipulate other users' Stripe subscriptions by simply modifying the email parameter in the request. Details The vulnerability exists in the subscription endpoint at...

CodeAstro Simple Loan Management System 安全漏洞

CodeAstro Simple Loan Management System is an online loan management system project from CodeAstro based on PHP language and MySQL database. A security vulnerability exists in CodeAstro Simple Loan Management System version 1.0, which stems from an incorrect manipulation of the parameter email th...

Simple Chat System 安全漏洞

Simple Chat System is a simple chat system by the individual developer nurhodelta17. A security vulnerability exists in Simple Chat System version 1.0, which stems from an incorrect manipulation of the parameters name/email/password/number that can lead to SQL injection...

PT-2024-35160

Name of the Vulnerable Software and Affected Versions Khoj versions prior to 1.29.10 Description The issue is related to an Insecure Direct Object Reference IDOR vulnerability in the update subscription endpoint, allowing any authenticated user to manipulate other users' Stripe subscriptions by...