Dino Physics School Assistant SQL注入漏洞

Dino Physics School Assistant is an application. A SQL injection vulnerability exists in Dino Physics School Assistant version 2.3, which originates from unrecognized code in /admin/category/viewcategory.php, which leads to SQL injection via the parameter id...

Dino Physics School Assistant Security Breach

Dino Physics School Assistant is an application. A security vulnerability exists in Dino Physics School Assistant version 2.3, which stems from a SQL injection vulnerability in the parameter id of the file /classes/Master.php...

PT-2024-26452 · Unknown · Diño Physics School Assistant

Name of the Vulnerable Software and Affected Versions: Diño Physics School Assistant version 2.3 Description: A vulnerability has been discovered that impacts an unidentified code within the file /classes/Users.php?f=save. Manipulating the id argument can result in improper authorization...

PT-2024-26458 · Unknown · Diño Physics School Assistant

Name of the Vulnerable Software and Affected Versions: Diño Physics School Assistant version 2.3 Description: A vulnerability has been discovered that impacts an unidentified code within the file /classes/Master.php?f=view item. Manipulating the argument id can result in SQL injection...

Dino Physics School Assistant 安全漏洞

Dino Physics School Assistant is an application. A security vulnerability exists in Dino Physics School Assistant version 2.3, which stems from an authorization error vulnerability in the parameter id of the file classes/Users.php...

Dino Physics School Assistant SQL注入漏洞

Dino Physics School Assistant is an application. A SQL injection vulnerability exists in Dino Physics School Assistant version 2.3, which originates from unrecognized code in /admin/page=borrow/viewborrow, which leads to SQL injection via the parameter id...

PT-2024-26453 · Unknown · Diño Physics School Assistant

Name of the Vulnerable Software and Affected Versions: Diño Physics School Assistant version 2.3 Description: A vulnerability has been discovered in the software, impacting an unidentified code within the file /classes/Master.php?f=save category. Manipulating the argument id can result in SQL...

CVE-2024-33402

A SQL injection vulnerability in /model/approvepettycash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-33806

A SQL injection vulnerability in /model/getgrade.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-33799

A SQL injection vulnerability in /model/getteacher.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-33808

A SQL injection vulnerability in /model/gettimetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

PT-2024-25485 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: campcodes Complete Web-Based School Management System version 1.0 Description: A SQL injection issue allows an attacker to execute arbitrary SQL commands via the id parameter in the "/model/get teacher.php" API endpoint. Recommendations: For...

PT-2024-25234 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: campcodes Complete Web-Based School Management System version 1.0 Description: A SQL injection issue allows an attacker to execute arbitrary SQL commands via the id parameter in the "/model/approve petty cash.php" API endpoint. Recommendation...

Online Student Enrollment System SQL注入漏洞

Online Student Enrollment System is an online student enrollment system by Lyndon Bermoy, an individual developer. A SQL injection vulnerability exists in Online Student Enrollment System version 1.0, which can be exploited by an attacker to send a specially crafted SQL statement to the...

PT-2024-35801 · Sourcecodester · Sourcecodester Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best House Rental Management System versions up to 1.0 Description: A critical issue has been found in the SourceCodester Best House Rental Management System, affecting the file edit-cate.php. The manipulation of the id argumen...

College Management System 跨站脚本漏洞

College Management System is a simple project organized by Code Projects. It is used to keep track of students, teachers, subjects, schedules and all things related to college. A cross-site scripting vulnerability exists in Kashipara College Management System version 1.0, which stems from the...

College Management System 跨站脚本漏洞

College Management System is a simple project organized by Code Projects. It is used to keep track of students, teachers, subjects, schedules and all things related to college. A cross-site scripting vulnerability exists in Kashipara College Management System version 1.0, which stems from a...

House Rental Management System SQL注入漏洞

House Rental Management System is a house rental management system by Carlo Montero Personal Developer. SourceCodester Best House Rental Management System 1.0 and prior versions have a SQL injection vulnerability that originates in the parameter id of the file manageuser.php that can lead to SQL...

PT-2024-30609 · WordPress · The Spectra – Wordpress Gutenberg Blocks

Name of the Vulnerable Software and Affected Versions: The Spectra – WordPress Gutenberg Blocks plugin versions up to, and including, 2.13.0 Description: The issue is related to Stored Cross-Site Scripting via the block id parameter due to insufficient input sanitization and output escaping. This...

Campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in Complete Web-Based School Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary SQL commands via the...