CVE-2024-2681: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/employee/index.php. The manipulation of the argument view leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2024-2679: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/vacancy/index.php. The manipulation of the argument view leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2024-2685: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in Campcodes Online Job Finder System 1.0. This affects an unknown part of the file /admin/applicants/index.php. The manipulation of the argument view leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2024-28303: Improper Neutralization of Special Elements used in an SQL Command

Open Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the date parameter at /admin/reports/index.php...

CVE-2024-2646: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /vpnweb/index.php?para=index. The manipulation of the argument checkVirtualSiteId leads to sql injection. The attack can be initiated remotely...

CVE-2024-2594: Improper Neutralization of Input During Web Page Generation

Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting XSS vulnerability through /amssplus/admin/index.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted URL to an...

PT-2024-21169

Name of the Vulnerable Software and Affected Versions AMSS++ version 4.31 Description The issue allows SQL injection through the /amssplus/index.php endpoint, specifically in the username parameter. This could enable a remote attacker to send a specially crafted SQL query to the server, potential...

CVE-2024-2588: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/admin/index.php, in the 'id' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB...

CVE-2023-49453

Reflected cross-site scripting XSS vulnerability in Racktables v0.22.0 and before, allows local attackers to execute arbitrary code and obtain sensitive information via the search component in index.php...

CVE-2023-49453: Improper Neutralization of Input During Web Page Generation

Reflected cross-site scripting XSS vulnerability in Racktables v0.22.0 and before, allows local attackers to execute arbitrary code and obtain sensitive information via the search component in index.php...

CVE-2023-49453

Reflected cross-site scripting XSS vulnerability in Racktables v0.22.0 and before, allows local attackers to execute arbitrary code and obtain sensitive information via the search component in index.php...

CVE-2024-28816

Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php...

PT-2024-22587

Name of the Vulnerable Software and Affected Versions Student Information Chatbot version a0196ab Description The issue allows SQL injection via the username to the login function in index.php. This can potentially lead to unauthorized access to sensitive data. Recommendations For version a0196ab...

CVE-2024-28816

Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php...

CVE-2024-28816

The Student Information Chatbot version a0196ab , a cloud-based student information system developed by Aarav Raj Singh, is vulnerable to SQL injection . The flaw exists in the login function within the index.php file, specifically caused by improper neutralization of special elements when proces...

CVE-2024-28816: Improper Neutralization of Special Elements used in an SQL Command

Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php...

CVE-2024-28816

Student Information Chatbot a0196ab allows SQL injection via the username to the login function in index.php...

CVE-2024-2330: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/index.php. The manipulation of the argument IPAddr leads to sql injection. It is possible to initiate the attack remotely. The...

PT-2024-19793

Name of the Vulnerable Software and Affected Versions Netentsec NS-ASG Application Security Gateway version 6.3 Description A critical issue has been found, affecting an unknown part of the file /protocol/index.php. The manipulation of the IPAddr argument leads to SQL injection. It is possible to...

CVE-2024-2282

A vulnerability was found in boyiddha Automated-Mess-Management-System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php of the component Login Page. The manipulation of the argument useremail leads to sql injection. The attack may be initiated...