Student Study Center Desk Management System SQL Injection Vulnerability

Student Study Center Desk Management System is a student study management system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in Student Study Center Desk Management System version 1.0, which originates from the parameter id of the file...

NetBox 安全漏洞

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A cross-site scripting vulnerability exists in NetBox v4.0.3, which stems from the lack of effective filtering and escaping of user-supplied data in t...

The vulnerability of the OAuth 2.0 authorization mechanism for Pushed Authorization Requests in the software tool for managing identity verification and access in Keycloak allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the OAuth 2.0 Pushed Authorization Request mechanism in the software for managing identity verification and access involves the storage of sensitive data in an open format within a cookie file called KCRESTART. Exploiting this vulnerability could allow an attacker to gain...

Home Owners Collection Management System SQL Injection Vulnerability

Home Owners Collection Management System is a homeowners collection management system. A SQL injection vulnerability exists in Home Owners Collection Management System version 1.0, which originates from the parameter id of the file /classes/Master.php?f=deletecategory that can lead to SQL injecti...

WordPress Gallery Blocks with Lightbox plugin <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via galleryID and className Parameters vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via galleryID and className Parameters vulnerability discovered by Webbernaut in WordPress Plugin SimpLy Gallery versions = 3.2.1...

PT-2024-25204 · Lumisxp · Lumisxp

Name of the Vulnerable Software and Affected Versions: Lumisxp versions 15.0.x through 16.1.x Description: A cross-site scripting XSS issue in the main.jsp component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the pageId parameter. Recommendations...

WordPress plugin Appointment Booking and Online Scheduling security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-27950 · Unknown · Codeprojects Health Care Hospital Management System

Name of the Vulnerable Software and Affected Versions: CodeProjects Health Care hospital Management System version 1.0 Description: The issue is related to a SQL injection vulnerability in the Room Information module. This vulnerability can be exploited via the id parameter. Recommendations: For...

Payroll Management System SQL Injection Vulnerability

Payroll Management System is a payroll management system developed by Carlo Montero. A SQL injection vulnerability exists in Payroll Management System version 1.0, which stems from the inclusion of some unknown functions in printpayroll.php that cause SQL injection via the parameter id...

PT-2024-37228 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Cab Management System version 1.0 Description: A critical issue has been discovered, affecting the /cms/classes/Users.php file, specifically when the id argument is manipulated, leading to SQL injection. This can be initiated...

PT-2024-34752 · WordPress · Magical Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Magical Addons For Elementor plugin for WordPress versions up to, and including, 1.1.39 Description: The issue is related to Stored Cross-Site Scripting via the id parameter due to insufficient input sanitization and output escaping. This...

Dino Physics School Assistant SQL Injection Vulnerability

Dino Physics School Assistant is an application. A SQL injection vulnerability exists in Dino Physics School Assistant version 2.3, which stems from unrecognized code in /classes/Master.php that causes SQL injection via the parameter id...

PT-2024-26455 · Unknown · Diño Physics School Assistant

Name of the Vulnerable Software and Affected Versions: Diño Physics School Assistant version 2.3 Description: A vulnerability has been discovered that impacts an unidentified code within the file /classes/Master.php?f=save item. Manipulating the id argument can result in SQL injection...

CVE-2024-33402

A SQL injection vulnerability in /model/approvepettycash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-33801

A SQL injection vulnerability in /model/getsubjectrouting.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

Campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in Complete Web-Based School Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary SQL commands via the id...

Campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in Complete Web-Based School Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary SQL commands via the id...

Campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in Complete Web-Based School Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary SQL commands via the id...

PT-2024-25492 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: campcodes Complete Web-Based School Management System version 1.0 Description: A SQL injection issue allows an attacker to execute arbitrary SQL commands via the id parameter in the "/model/get student.php" API endpoint. Recommendations: For...

PT-2024-25495 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: campcodes Complete Web-Based School Management System version 1.0 Description: A SQL injection issue allows an attacker to execute arbitrary SQL commands via the id parameter in the "/model/get timetable.php" API endpoint. This could...