CVE-2024-0468

The CVE-2024-0468 entry concerns code-projects Fighting Cock Information System 1.0. The vulnerability affects the file /admin/action/new-father.php, where manipulating the image argument enables unrestricted file upload. It is exploitable remotely and the exploit has been disclosed publicly. Aff...

CVE-2024-0468 code-projects Fighting Cock Information System new-father.php unrestricted upload

A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/action/new-father.php. The manipulation of the argument image leads to unrestricted upload. The attack can...

PT-2024-15594 · Unknown · Code-Projects Fighting Cock Information System

Name of the Vulnerable Software and Affected Versions: code-projects Fighting Cock Information System version 1.0 Description: A critical issue has been found in the code-projects Fighting Cock Information System, affecting unknown code of the file /admin/action/update-deworm.php. The manipulatio...

Fighting Cock Information System security breach

Fighting Cock Information System is a chicken information system by chrisjelo individual developer. The code-projects Fighting Cock Information System version 1.0 has a security vulnerability that stems from an SQL injection vulnerability in the /admin/action/new-father.php file...

CVE-2023-6190

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in İzmir Katip Çelebi University University Information Management System allows Absolute Path Traversal.This issue affects University Information Management System: before 30.11.2023...

PT-2023-32559

Name of the Vulnerable Software and Affected Versions İzmir Katip Çelebi University University Information Management System versions prior to 30.11.2023 Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allow...

Hospital Management System SQL Injection Vulnerability

Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A SQL injection vulnerability exists in Hospital Management System. No information about this vulnerability is available at this time,...

CVE-2023-5988

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies LioXERP allows Reflected XSS. This issue affects LioXERP: before v.146...

CVE-2023-5989

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies' LioXERP allows an authenticated user to execute Stored XSS. This issue affects LioXERP: before v.146...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies LioXERP allows Stored XSS.This issue affects LioXERP: before v.146...

CVE-2023-5989

CVE-2023-5989 describes a Stored XSS in Uyumsoft Information System and Technologies’ LioXERP (versions prior to v.146). The root cause is improper neutralization of input during web page generation , allowing an authenticated user to inject scripts that are stored and later executed. Affected pr...

CVE-2023-5989 Stored XSS in Uyumsoft ERP

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies' LioXERP allows an authenticated user to execute Stored XSS. This issue affects LioXERP: before v.146...

CVE-2023-5988 Reflected XSS in Uyumsoft ERP

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies LioXERP allows Reflected XSS. This issue affects LioXERP: before v.146...

CVE-2023-5988 Reflected XSS in Uyumsoft ERP

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Uyumsoft Information System and Technologies LioXERP allows Reflected XSS. This issue affects LioXERP: before v.146...

CVE-2023-5988

CVE-2023-5988 is a Reflected XSS in Uyumsoft LioXERP prior to v1.46. The root cause is improper neutralization of input during web page generation, allowing reflected script execution. Affected: LioXERP versions before 146. Remediation: upgrade to version 146 or later (per PT-Security guidance pr...

CVE-2023-5011

Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursename' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-5007

Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'id' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-5007

Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'id' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database...

Sql injection

Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursecode' parameter of the marks.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-5007

The CVE-2023-5007 entries describe an authenticated SQL injection in Student Information System v1.0, specifically in marks.php where the id parameter is not validated and is sent to the database unfiltered. Concrete details across connected docs: vulnerable component is marks.php (id parameter);...