PT-2023-17243 · Sourcecodester · Sourcecodester Earnings/Expense Tracker App

Name of the Vulnerable Software and Affected Versions: SourceCodester Earnings and Expense Tracker App version 1.0 Description: A critical issue was found in the SourceCodester Earnings and Expense Tracker App, affecting an unknown function of the file manage user.php. The manipulation of the id...

PT-2023-17201 · Sourcecodester · Sourcecodester Young Entrepreneur E-Negosyo System

Name of the Vulnerable Software and Affected Versions: SourceCodester Young Entrepreneur E-Negosyo System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file cart/controller.php?action=add. The manipulation of the PROID argument...

CVE-2023-1675

A vulnerability was found in SourceCodester School Registration and Fee System 1.0. It has been classified as critical. Affected is an unknown function of the file /bilal final/editstud.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is...

CVE-2023-1666

A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. This vulnerability affects unknown code of the file users/classes/viewclass.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

PT-2023-17155 · Sourcecodester · Sourcecodester Automatic Question Paper Generator System

Name of the Vulnerable Software and Affected Versions: SourceCodester Automatic Question Paper Generator System version 1.0 Description: A critical issue has been found in the GET Parameter Handler component, specifically in the file users/classes/view class.php. The manipulation of the id argume...

Zhongbang CRMEB SQL注入漏洞

Zhongbang CRMEB is an open source e-commerce management system from China's Xi'an Zhongbang Network Zhongbang Company. CRMEB Java version 1.3.4 SQL injection vulnerability , the vulnerability stems from the file / api/admin/store/product/list function getAdminListe security issues , through the...

CVE-2023-27637

An issue was discovered in the tshirtecommerce aka Custom Product Designer component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised productid GET parameter in order to exploit an insecure parameter in the front controller file designer.php, which could lead to a SQL...

PT-2023-17080 · Sourcecodester · Sourcecodester Garage Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Air Cargo Management System version 1.0 Description: A critical issue was found in the SourceCodester Air Cargo Management System, affecting some unknown functionality of the file admin/transactions/update status.php of the...

Air Cargo Management System SQL注入漏洞

Air Cargo Management System is an air cargo management system. A SQL injection vulnerability exists in SourceCodester Air Cargo Management System version 1.0, which stems from a problem in the file admin/transactions/updatestatus.php, where manipulation of the parameter id can lead to sql injecti...

answer 安全漏洞

answer is an open source knowledge-based community software. answer 1.0.6 prior versions of the authorization problem vulnerability , the vulnerability stems from the request to set a new password in /answer/admin/api/user/password there is improper permission management , a low-privilege attacke...

CVE-2023-1505

A vulnerability, which was classified as critical, has been found in SourceCodester E-Commerce System 1.0. This issue affects some unknown processing of the file /ecommerce/admin/settings/setDiscount.php. The manipulation of the argument id with the input 201737 AND SELECT 8973 FROM...

E-Commerce System SQL注入漏洞

Moosikay E-Commerce System is an e-commerce system by the individual developer Arvin Arandilla. A SQL injection vulnerability exists in E-Commerce System version 1.0, which stems from an incorrect manipulation of the parameter id resulting in sql injection...

PT-2023-20841 · Unknown · Alphaware - Simple E-Commerce System

Name of the Vulnerable Software and Affected Versions: Alphaware - Simple E-Commerce System version 1.0 Description: The issue is related to a SQL injection that can directly issue instructions to the background database system. This is possible via the "/alphaware/details.php?id" API endpoint,...

CVE-2023-1481

CVE-2023-1481 affects SourceCodester Monitoring of Students Cyber Accounts System v1.0. A cross-site scripting vulnerability exists in modules/balance/index.php?view=balancelist, caused by manipulation of the POST parameter id with input such as >. It can be exploited remotely; exploit has bee...

PT-2023-17018 · Sourcecodester · Sourcecodester Monitoring Of Students Cyber Accounts System

Name of the Vulnerable Software and Affected Versions: SourceCodester Monitoring of Students Cyber Accounts System version 1.0 Description: A problematic issue has been found in the system, affecting some unknown functionality of the file modules/balance/index.php, specifically the POST Parameter...

CVE-2023-1471

The WP Popup Banners plugin for WordPress is vulnerable to SQL Injection via the 'bannerid' parameter in versions up to, and including, 1.2.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

SourceCodester Automatic Question Paper Generator System SQL注入漏洞

Automatic Question Paper Generator System is an automatic question paper generator system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Automatic Question Paper Generator System version 1.0, which originates from a SQL injection vulnerability found in...

PT-2023-17009 · WordPress · Wp Popup Banners

Name of the Vulnerable Software and Affected Versions: WP Popup Banners plugin for WordPress versions up to, and including, 1.2.5 Description: The issue allows for SQL Injection via the banner id parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient...

PT-2023-17004 · Sourcecodester · Sourcecodester Student Study Center Desk Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Study Center Desk Management System version 1.0 Description: A critical issue affects the function view student of the file "admin/?page=students/view student". The manipulation of the argument id with a specific input...

Student Study Center Desk Management System SQL注入漏洞

Student Study Center Desk Management System is a student study center desk management system. A SQL injection vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which originates from a security issue in the function viewstudent in...