Code-Projects University Event Management System 安全漏洞

Code-Projects University Event Management System is an open source university event management system from Code-Projects. A security vulnerability exists in Code-Projects University Event Management System version 1.0, which originates from an SQL injection in the parameter id...

CVE-2024-10700

A vulnerability was found in code-projects University Event Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file submit.php. The manipulation of the argument name/email/title/Year/gender/fromdate/todate/people leads to sql injection. The...

CVE-2024-10700

A vulnerability was found in code-projects University Event Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file submit.php. The manipulation of the argument name/email/title/Year/gender/fromdate/todate/people leads to sql injection. The...

CVE-2024-10700 code-projects University Event Management System submit.php sql injection

A vulnerability was found in code-projects University Event Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file submit.php. The manipulation of the argument name/email/title/Year/gender/fromdate/todate/people leads to sql injection. The...

Code-Projects University Event Management System SQL注入漏洞

Code-Projects University Event Management System is an open source university event management system from Code-Projects. Code-Projects University Event Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from the parameter...

Event Management System 1.0 Insecure Direct Object Reference

============================================================================================================================================= | Title : Event Management System v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64 bi...

CVE-2024-44727

Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...

CVE-2024-44727

Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...

CVE-2024-44728

Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact in /clientdetails/admin/regester.php...

Sourcecodehero Event Management System 安全漏洞

Sourcecodehero Event Management System is an open source event management system from Sourcecodehero. A security vulnerability exists in Sourcecodehero Event Management System version 1.0, which is caused by SQL injection via the parameter "username" in /event/admin/login.php...

CVE-2024-44728

Affected software : Sourcecodehero Event Management System 1.0. Vulnerability : Stored Cross-Site Scripting (XSS) in the API endpoint "/clientdetails/admin/regester.php" via the parameters Full Name, Address, Email, and contact#. Root cause / details : Publicly documented as an XSS path; the issu...

CVE-2024-44727

Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...

PT-2024-31224 · Unknown · Sourcecodehero Event Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodehero Event Management System version 1.0 Description: The issue is related to a SQL Injection vulnerability via the parameter username in the "/event/admin/login.php" endpoint. This allows attackers to remotely compromise databases...

CVE-2024-44728

Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact in /clientdetails/admin/regester.php...

Sourcecodehero Event Management System 安全漏洞

Sourcecodehero Event Management System is an open source event management system from Sourcecodehero. A security vulnerability exists in the Sourcecodehero Event Management System version 1.0, which stems from a vulnerability that allows storage via the Full Name, Address, Email, and contact...

CVE-2024-44728

Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact in /clientdetails/admin/regester.php...

CVE-2024-44727

Sourcecodehero Event Management System 1.0 is vulnerable to an SQL Injection via the username parameter in /event/admin/login.php. Documented across multiple feeds; no patch/version fix details are provided in the supplied materials. Exploitation details, impact, and mitigations beyond the generi...

CVE-2024-33991

Cross-Site Scripting XSS vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/eventwinner/index.php'...

CVE-2024-33994

Cross-Site Scripting XSS vulnerability in School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain their session details via the 'view' parameter in '/event/index.php'...

CVE-2024-33992

Cross-Site Scripting XSS vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/student/index.php'...