Code-Projects Job Portal SQL注入漏洞

Code-Projects Job Portal is Code-Projects open source PHP-based job search website system. A SQL injection vulnerability exists in Code-Projects Job Portal version 1.0, which originates from a SQL injection vulnerability in the email/mobile parameter of the /forget.php page...

Kashipara Music Management System SQL Injection Vulnerability (CNVD-2024-37436)

Kashipara Music Management System is a music management system from Kashipara. Kashipara Music Management System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the email parameter of /music/ajax.php?action=login against external SQL input, which c...

CVE-2024-42770

A Stored Cross Site Scripting XSS vulnerability was found in "/core/signupuser.php" of Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via the "useremail" parameter...

CVE-2024-42770

A Stored Cross Site Scripting XSS vulnerability was found in "/core/signupuser.php" of Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via the "useremail" parameter...

SourceCodester E-Commerce System SQL注入漏洞

SourceCodester E-Commerce System is an e-commerce system from SourceCodester Inc. SourceCodester E-Commerce System version 1.0 suffers from a SQL injection vulnerability in the useremail parameter of /ecommerce/admin/login.php of the component Admin Login page...

CVE-2024-42770

A Stored Cross Site Scripting XSS vulnerability was found in "/core/signupuser.php" of Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via the "useremail" parameter...

CVE-2024-42762

A Stored Cross Site Scripting XSS vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the Name, Phone, and Email parameter fields...

PT-2024-30141 · Unknown · Kashipara Hotel Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Hotel Management System version 1.0 Description: A Stored Cross Site Scripting XSS issue was found in the "/core/signup user.php" endpoint, allowing remote attackers to execute arbitrary code via the user email parameter...

CVE-2024-42762

A Stored Cross Site Scripting XSS vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the Name, Phone, and Email parameter fields...

CVE-2024-42781

A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the email parameter...

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. Kashipara Music Management System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the email parameter of /music/ajax.php?action=login against external SQL input, which c...

CVE-2024-42781

A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the email parameter...

CVE-2024-42781

Kashipara Music Management System v1.0 suffers from a SQL injection in /music/ajax.php?action=login via the email parameter, enabling remote attackers to execute arbitrary SQL and bypass login. Documented details indicate a high-severity issue with potential data exposure and authentication bypas...

SourceCodester Point of Sales and Inventory Management System SQL注入漏洞

SourceCodester Point of Sales and Inventory Management System is a point of sale and inventory management system from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Point of Sales and Inventory Management System version 1.0, which originates from a SQL injection...

CVE-2024-7808

A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown function of the file logindbc.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

code-projects Job Portal 安全漏洞

Code-Projects Job Portal is Code-Projects open source PHP-based job search website system. A security vulnerability exists in code-projects Job Portal version 1.0, which is caused by an SQL injection vulnerability in the email parameter of the logindbc.php page...

PT-2024-38595 · Unknown · Code-Projects Job Portal

Name of the Vulnerable Software and Affected Versions: code-projects Job Portal version 1.0 Description: A critical issue was found in the logindbc.php file, where an unknown function is affected. The manipulation of the email argument leads to SQL injection. It is possible to launch the attack...

CVE-2024-40478

A Stored Cross Site Scripting XSS vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam System v1.0, which allows remote attackers to execute arbitrary code via "rname" and "email" parameter fields...

CVE-2024-40477

A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "email" parameter...

CVE-2024-40477

A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "email" parameter...