PT-2024-38102 · WordPress · Jetsearch

Name of the Vulnerable Software and Affected Versions: JetSearch plugin for WordPress versions up to, and including, 3.5.2 Description: The issue is related to Stored Cross-Site Scripting via the id parameter due to insufficient input sanitization and output escaping. This allows authenticated...

CVE-2024-7810

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /tracking/admin/viewitprofile.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

itsourcecode Billing System SQL注入漏洞

itsourcecode Billing System is a system developed by itsourcecode for PHP MySQL databases using HTML, CSS, Bootstrap, JavaScript, Ajax, J Query and Modal. this PH Billing System project contains an administrator side where the administrator can manage all billing activities and customer...

Simple Online Bidding System SQL注入漏洞

Simple Online Bidding System is an online bidding system by oretnom23 individual developer. A SQL injection vulnerability exists in Simple Online Bidding System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...

PT-2024-38591 · Unknown · Sourcecodester Simple Online Bidding System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Bidding System version 1.0 Description: A critical vulnerability has been found in the software, affecting an unknown part of the file /simple-online-bidding-system/bidding/admin/ajax.php?action=delete product. Th...

PT-2024-38586

Name of the Vulnerable Software and Affected Versions itsourcecode Vehicle Management System version 1.0 Description A critical issue has been found in the itsourcecode Vehicle Management System, affecting some unknown functionality of the file mybill.php. The manipulation of the id argument lead...

Code-Projects Job Portal SQL注入漏洞

Code-Projects Job Portal is Code-Projects open source PHP-based job site system. Code-Projects Job Portal version 1.0 has a SQL injection vulnerability, the vulnerability stems from the id parameter in the rwinat.php file contains a SQL injection vulnerability...

SourceCodester Kortex Lite Advocate Office Management System 安全漏洞

SourceCodester Kortex Lite Advocate Office Management System is an office management system from SourceCodester, Inc. A security vulnerability exists in version 1.0 of the SourceCodester Kortex Lite Advocate Office Management System, which stems from an SQL injection vulnerability in the id...

PT-2024-38492 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the id argument in an unknown function of the file view details.php. Thi...

PT-2024-38494 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A critical issue has been found in the SourceCodester Car Driving School Management System, affecting some unknown functionality of the file view package.php. The...

PT-2024-38496 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A critical issue has been discovered, affecting the delete package function of the Master.php file. The manipulation of the id argument leads to SQL injection. This...

PT-2024-38491 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A critical issue affects the management of the file manage user.php, where the manipulation of the id argument leads to SQL injection. This issue may be initiated...

PT-2024-38498 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Car Driving School Management System version 1.0 Description: A critical issue has been found, allowing for SQL injection through the manipulation of the id argument in the save package function of the /classes/Master.php?f=sav...

PT-2024-38471 · Sourcecodester · Sourcecodester Kortex Lite Advocate Office Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A critical issue was found in the system, affecting the delete act.php file. The manipulation of the id argument leads to SQL injection. This issue can be...

WordPress Slider by 10Web plugin <= 1.2.57 - Authenticated (Contributor+) SQL Injection via id Parameter vulnerability

Authenticated Contributor+ SQL Injection via id Parameter vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Slider by 10Web versions = 1.2.57...

PT-2024-38112 · 10Web · The Slider By 10Web

Name of the Vulnerable Software and Affected Versions: The Slider by 10Web – Responsive Image Slider plugin for WordPress versions up to, and including, 1.2.57 Description: The issue is related to time-based SQL Injection via the id parameter due to insufficient escaping on the user-supplied...

CVE-2024-33982

Cross-Site Scripting XSS vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'StudentID' parameter in...

CVE-2024-33990 Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System

Cross-Site Scripting XSS vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted javascript payload to an authenticated user and partially take over their browser session via the 'id' and 'view' parameters ...

CVE-2024-33990

CVE-2024-33990 describes a Cross-Site Scripting (XSS) vulnerability in School Event Management System v1.0 . The issue can be triggered by an authenticated user who receives a specially crafted payload via the id and view parameters in /user/index.php , allowing an attacker to partially take over...

CVE-2024-33969

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in...