CVE-2024-51060

Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'aid' parameter...

CVE-2024-51065: Improper Neutralization of Special Elements used in an SQL Command

Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter...

PT-2024-34511

Name of the Vulnerable Software and Affected Versions: Phpgurukul Beauty Parlour Management System version 1.1 Description: The issue is related to SQL Injection in the admin/index.php file via the username parameter. This allows for potential exploitation of the system. Recommendations: For...

CVE-2024-51060

Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'aid' parameter...

CVE-2024-51060: Improper Neutralization of Special Elements used in an SQL Command

Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'aid' parameter...

CVE-2024-51060

Projectworlds Online Admission System v1 is vulnerable to SQL Injection within the index.php file. The vulnerability is triggered via the 'a_id' parameter, potentially allowing for unauthorized exploitation of the database. To mitigate this risk, it is recommended to restrict access to the 'a_id'...

GHSA-PJHX-J53P-C5F5 ThinkPHP deserialization vulnerability

A deserialization vulnerability in the component \controller\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code...

CVE-2024-48112

A deserialization vulnerability in the component \controller\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code...

CVEs

CVE-2024-51060: SQL Injection in Projectworlds Online Admissio...

CVE-2024-46531: Improper Neutralization of Special Elements used in an SQL Command

phpgurukul Vehicle Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchinputdata parameter at /index.php...

CVE-2024-48112

A deserialization vulnerability in the component \controller\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code...

CVE-2024-46531

phpgurukul Vehicle Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchinputdata parameter at /index.php...

CVE-2024-46531

The phpgurukul Vehicle Record Management System v1.0 contains a SQL injection vulnerability within the /index.php file. The root cause is the lack of validation for externally entered SQL statements provided via the searchinputdata parameter. An attacker can exploit this flaw to execute unauthori...

CVE-2024-46531

phpgurukul Vehicle Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchinputdata parameter at /index.php...

CVE-2024-48112: Deserialization of Untrusted Data

A deserialization vulnerability in the component \controller\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code...

CVE-2024-10433

A vulnerability was found in Project Worlds Simple Web-Based Chat Application 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument Name/Comment leads to cross site scripting. The attack may be launched...

CVE-2024-10433 Project Worlds Simple Web-Based Chat Application index.php cross site scripting

A vulnerability was found in Project Worlds Simple Web-Based Chat Application 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument Name/Comment leads to cross site scripting. The attack may be launched...

CVE-2024-10433 Project Worlds Simple Web-Based Chat Application index.php cross site scripting

A vulnerability was found in Project Worlds Simple Web-Based Chat Application 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument Name/Comment leads to cross site scripting. The attack may be launched...

CVE-2024-10433

The CVE-2024-10433 issue affects Project Worlds Simple Web-Based Chat Application 1.0. The vulnerability is a cross-site scripting flaw in the /index.php page, triggered by manipulating the Name/Comment parameter. It is described as exploitable remotely, with public disclosure of exploits. The av...

PT-2024-16279

Name of the Vulnerable Software and Affected Versions Project Worlds Simple Web-Based Chat Application version 1.0 Description A vulnerability was found in the file /index.php, where the manipulation of the Name/Comment argument leads to cross-site scripting. The attack can be launched remotely...