CVE-2024-5063: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Online Course Registration System 3.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. T...

Simple Online Bidding System SQL Injection Vulnerability

Simple Online Bidding System is an online bidding system by oretnom23 individual developer. A SQL injection vulnerability exists in Simple Online Bidding System version 1.0, which originates from /simple-online-bidding-system/index.php, which contains unknown code that leads to SQL injection via...

CVE-2024-4931: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Online Bidding System 1.0. This issue affects some unknown processing of the file /simple-online-bidding-system/admin/index.php?page=viewudet. The manipulation of the argument id leads to sql injection. The...

CVE-2024-4930: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Simple Online Bidding System 1.0. This vulnerability affects unknown code of the file /simple-online-bidding-system/index.php?page=viewprod. The manipulation of the argument id leads to sql injection. The attack can be initiated...

CVE-2024-4818

A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

CVE-2024-4722: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument category leads to cross site scripting. The attack can be initiated remotely. The explo...

CVE-2024-4822: Improper Neutralization of Input During Web Page Generation

Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php'. This vulnerability allows an attacker to partially take control of the victim's browser session...

CVE-2024-4818: External Control of File Name or Path

A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

CVE-2024-4818 Campcodes Online Laundry Management System index.php file inclusion

A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

CVE-2024-4818

CVE-2024-4818 affects Campcodes Online Laundry Management System 1.0. A vulnerability in the /index.php? page parameter enables (remote) file inclusion via manipulation of the page argument. This is a network-accessible path with no authentication required; the impact wording in sources cites pos...

PT-2024-33013

Name of the Vulnerable Software and Affected Versions Campcodes Online Laundry Management System version 1.0 Description A problematic issue was found in the system, affecting the processing of the file "/index.php". The manipulation of the page argument leads to file inclusion. This issue can be...

CVE-2024-33409

SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter...

CVE-2024-33409

SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter...

CVE-2024-33409: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter...

PT-2024-25241

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description The issue allows an attacker to execute arbitrary SQL commands via the name parameter in the index.php file. This can lead to unauthorized access and manipulation of...

CVE-2024-33409

A critical SQL injection vulnerability exists in the index.php file of campcodes Complete Web-Based School Management System 1.0 . This flaw allows an attacker to execute arbitrary SQL commands by interacting with the name parameter. The vulnerability results from improper neutralization of speci...

CVE-2024-34469

Rukovoditel before 3.5.3 allows XSS via userphoto to index.php?module=users/registration&action=save...

CVE-2024-34469: Improper Neutralization of Input During Web Page Generation

Rukovoditel before 3.5.3 allows XSS via userphoto to index.php?module=users/registration&action=save...

CVE-2024-34469

Rukovoditel before 3.5.3 allows XSS via userphoto to index.php?module=users/registration&action=save...

CVE-2024-34469

Rukovoditel versions prior to 3.5.3 are vulnerable to Cross-Site Scripting (XSS) due to a lack of input protection when processing the user_photo parameter. This vulnerability affects the index.php?module=users/registration&action=save component within the administration interface. An attacker ca...