13403 matches found
CVE-2024-7281: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown function of the file /admin/index.php?page=managelot. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...
PT-2024-38265
Name of the Vulnerable Software and Affected Versions itsourcecode Online Blood Bank Management System version 1.0 Description A critical vulnerability has been found in the itsourcecode Online Blood Bank Management System. This issue affects the /admin/index.php file of the Admin Login component...
CVE-2024-7320: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affects an unknown part of the file /admin/index.php of the component Admin Login. The manipulation of the argument user leads to sql injection. It is possible to initiate the attac...
CVE-2024-37859: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page parameter to php-lfis/admin/index.php...
CVE-2024-40576
Cross Site Scripting vulnerability in Best House Rental Management System 1.0 allows a remote attacker to execute arbitrary code via the "House No" and "Description" parameters in the houses page at the index.php component...
CVE-2024-40576: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Best House Rental Management System 1.0 allows a remote attacker to execute arbitrary code via the "House No" and "Description" parameters in the houses page at the index.php component...
CVE-2024-40576
The Best House Rental Management System version 1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw. A remote attacker can execute arbitrary code by manipulating the "House No" and "Description" parameters within the houses page of the index.php component. This is caused by improper neutraliza...
CVE-2024-7163 SeaCMS index.php cross site scripting
A vulnerability, which was classified as problematic, was found in SeaCMS 12.9. This affects an unknown part of the file /js/player/dmplayer/player/index.php. The manipulation of the argument color/vid/url leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...
CVE-2024-7163
A vulnerability, which was classified as problematic, was found in SeaCMS 12.9. This affects an unknown part of the file /js/player/dmplayer/player/index.php. The manipulation of the argument color/vid/url leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...
CVE-2024-7163: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in SeaCMS 12.9. This affects an unknown part of the file /js/player/dmplayer/player/index.php. The manipulation of the argument color/vid/url leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...
CVE-2024-6573: Exposure of Sensitive Information to an Unauthorized Actor
The Intelligence plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.4.0. This is due the plugin not preventing direct access to the /vendor/levelten/intel/realtime/index.php file and displayerrors being enabled. This makes it possible for...
CVE-2024-41355
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/tools/request-ip/index.php...
CVE-2024-41355: Improper Neutralization of Input During Web Page Generation
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/tools/request-ip/index.php...
CVE-2024-41355
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/tools/request-ip/index.php...
CVE-2024-6936
A vulnerability, which was classified as problematic, has been found in formtools.org Form Tools 3.1.1. This issue affects some unknown processing of the file /admin/settings/index.php?page=accounts of the component Setting Handler. The manipulation of the argument Page Theme leads to code...
CVE-2024-6898
A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument UserName leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-6898 SourceCodester Record Management System index.php sql injection
A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument UserName leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-6898
CVE-2024-6898 affects SourceCodester Record Management System 1.0. The vulnerability is a SQL injection in an unknown part of the file index.php caused by manipulation of the UserName argument. It can be triggered remotely, and multiple sources indicate public disclosure of the exploit. The explo...
CVE-2024-6898: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument UserName leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
