45 matches found
Code-Projects Patient Record Management System 注入漏洞
Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from improper handling of the parameter itrno in the file /xrayform.php, which can be exploited by an attacker to bypass authenticati...
CVE-2025-3243 code-projects Patient Record Management System dental_form.php sql injection
A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dentalform.php. The manipulation of the argument itrno/dentalno leads to sql injection. The attack may be initiated remotely. The...
PT-2025-3803 · Unknown · Codezips Project Management System
Name of the Vulnerable Software and Affected Versions: Codezips Project Management System version 1.0 Description: A critical issue has been found in Codezips Project Management System. This issue affects an unknown part of the file /pages/forms/course.php. The manipulation of the course name...
Online Birth Certificate System /user/certificate-form.php file cross-site scripting vulnerability
Online Birth Certificate System is an online birth certificate system. Online Birth Certificate System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the /user/certificate-form.php file, which can be exploite...
PT-2024-34596 · Projectworlds · Travel Management System
Name of the Vulnerable Software and Affected Versions: ProjectWorld's Travel Management System version 1.0 Description: The issue allows remote attackers to bypass authentication via SQL Injection in the username and password fields. This is a result of a SQL Injection vulnerability in the...
PT-2024-32009 · Unknown · Campcodes Complete Web-Based School Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A problem was found in the system. It affects some unknown functionality of the file /view/student exam mark update form.php. The manipulation of the argument std...
PT-2024-18860 · Unknown · Bdtask Hospita Automanager
Name of the Vulnerable Software and Affected Versions: Bdtask Hospita AutoManager versions up to 20240223 Description: A problem was found in the Hospital Activities Page component, affecting the processing of the /hospital activities/birth/form file. The issue is related to the manipulation of t...
The vulnerability of the OLE2 form file analysis component in the ClamAV antivirus program allows a hacker to trigger a service failure.
The vulnerability of the OLE2 file analysis component in the ClamAV antivirus program lies in the ability to read data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted OLE2 file...
SourceCodester Simple Student Attendance System SQL Injection Vulnerability
Simple Student Attendance System is a simple student attendance system. SourceCodester Simple Student Attendance System version 1.0 has a SQL injection vulnerability that originates from a SQL injection vulnerability in the file /models/studentform.php...
CVE-2023-6619
A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /modals/classform.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to th...
CVE-2023-2676
A vulnerability, which was classified as critical, has been found in H3C R160 V1004004. Affected by this issue is some unknown functionality of the file /goForm/aspForm. The manipulation of the argument go leads to stack-based buffer overflow. The exploit has been disclosed to the public and may ...
UBUNTU-CVE-2023-31047
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField only the last uploaded file was validated. However,...
PT-2023-9029 · Golang +10 · Golang +10
Name of the Vulnerable Software and Affected Versions: Golang affected versions not specified Description: The issue is related to the consumption of large amounts of CPU and memory when processing form inputs containing a large number of parts. This can be caused by several factors, including th...
cool-php-captcha 跨站脚本漏洞
cool-php-captcha is an application by the individual developer LaoWei. A cross-site scripting vulnerability exists in version 0.2 of cool-php-captcha, which stems from unknown code in the file example-form.php, and can be exploited to cause cross-site scripting using the input of an action-specif...
CVE-2021-40921
Cross-site scripting XSS vulnerability in contactform.inc.php in Detector 0.8.5 and below version allows remote attackers to inject arbitrary web script or HTML via the cid parameter...
NETGEAR R6700 Buffer Overflow Vulnerability
The NETGEAR R6700 is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR R6700 version V1.0.4.8410.0.58. The vulnerability stems from the program failing to properly validate the length of user-supplied data before copying it to a stack-based fixed buffer. An attacke...
CVE-2019-12099
In PHP-Fusion 9.03.00, editprofile.php allows remote authenticated users to execute arbitrary code because includes/dynamics/includes/formfileinput.php and includes/classes/PHPFusion/Installer/Lib/Core.settings.inc mishandle executable files during avatar upload...
Biometric Shift Employee Management System Arbitrary File Download Vulnerability
Biometric Shift Employee Management System is an employee management system. An arbitrary file download vulnerability exists in Biometric Shift Employee Management System. An attacker can download arbitrary files via a directory traversal sequence in the index.php formfilename parameter of the...
