CVE-2024-3357: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. This affects an unknown part of the file admin/modreports/index.php. The manipulation of the argument end leads to cross site scripting. It is possible to initiate the...

CVE-2024-3353: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/modreports/index.php. The manipulation of the argument categ/end leads to sql injection. The attack may be initiat...

CVE-2024-31008

An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file...

CVE-2024-31008

An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file...

CVE-2024-31008

An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file...

CVE-2024-31008

A security vulnerability was discovered in WUZHICMS version 4.1.0 , an open-source content management system based on PHP and MySQL. The flaw allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file. As a temporary workaround, it is recommended to disab...

CVE-2024-30998

SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via the email parameter in the index.php component...

CVE-2024-31008

An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file...

CVE-2024-31008: Authentication Bypass by Spoofing

An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file...

CVE-2024-30998: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via the email parameter in the index.php component...

CVE-2024-30862: Improper Neutralization of Special Elements used in an SQL Command

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php...

CVE-2024-30862

netentsec NS-ASG version 6.3 is vulnerable to an SQL Injection vulnerability. The flaw originates from the /3g/index.php API endpoint, which fails to properly neutralize special elements used in SQL commands. This vulnerability could allow an attacker to execute unauthorized SQL queries. While no...

CVE-2024-3000 code-projects Online Book System index.php sql injection

A vulnerability classified as critical was found in code-projects Online Book System 1.0. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument username/password/loginusername/loginpassword leads to sql injection. The attack can be initiated remotely. Th...

CVE-2024-3000 code-projects Online Book System index.php sql injection

A vulnerability classified as critical was found in code-projects Online Book System 1.0. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument username/password/loginusername/loginpassword leads to sql injection. The attack can be initiated remotely. Th...

PT-2024-23177 · Unknown · Code-Projects Online Book System

Name of the Vulnerable Software and Affected Versions: code-projects Online Book System version 1.0 Description: A critical vulnerability was found in the code-projects Online Book System. This issue affects the file /index.php and is related to the manipulation of the username, password, login...

CVE-2024-3000: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Online Book System 1.0. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument username/password/loginusername/loginpassword leads to sql injection. The attack can be initiated remotely. Th...

CVE-2024-2917: External Control of File Name or Path

A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched remotely. The...

CVE-2024-29273

There is Stored Cross-Site Scripting XSS in dzzoffice 2.02.1 SC UTF8 in uploadfile to index.php, with the XSS payload in an SVG document...

CVE-2024-29273

The collaborative office suite dzzoffice version 2.02.1 SC UTF8 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a lack of effective filtering and escaping of user-supplied data, specifically allowing an attacker to inject a crafted SVG document containing an XSS payload int...

CVE-2024-29273: Improper Neutralization of Input During Web Page Generation

There is Stored Cross-Site Scripting XSS in dzzoffice 2.02.1 SC UTF8 in uploadfile to index.php, with the XSS payload in an SVG document...