CVE-2023-2774 code-projects Bus Dispatch and Information System view_branch.php sql injection

A vulnerability was found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file viewbranch.php. The manipulation of the argument branchid leads to sql injection. The attack may be launched remotely. Th...

CVE-2023-2774

CVE-2023-2774 affects code-projects Bus Dispatch and Information System 1.0, targeting the view_branch.php/view branch.php component. The root cause is improper handling of the branchid parameter, enabling SQL injection that can be exploited remotely. Multiple sources confirm a public exploit exi...

CVE-2023-2773

A vulnerability has been found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file viewadmin.php. The manipulation of the argument adminid leads to sql injection. The attack can be launched...

Sql injection

A vulnerability has been found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file viewadmin.php. The manipulation of the argument adminid leads to sql injection. The attack can be launched...

CVE-2023-2773 code-projects Bus Dispatch and Information System view_admin.php sql injection

A vulnerability has been found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file viewadmin.php. The manipulation of the argument adminid leads to sql injection. The attack can be launched...

CVE-2023-2773

CVE-2023-2773 affects code-projects Bus Dispatch and Information System 1.0. The vulnerability is a SQL injection in the view_admin.php functionality triggered by manipulating the adminid parameter. The issue can be exploited remotely, and the vulnerability impact is described as high (confidenti...

Bus Dispatch and Information System SQL注入漏洞

Bus Dispatch and Information System is a bus dispatch and information system. A SQL injection vulnerability exists in Bus Dispatch and Information System version 1.0, which stems from an unknown function in viewadmin.php that causes sql injection via the parameter adminid...

mysql: Server: GIS unspecified vulnerability (CPU Jan 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: GIS. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Lost and Found Information System 1.0. Affected by this issue is some unknown functionality of the file admin/?page=items/viewitem of the component GET Parameter Handler. The manipulation of the argument id leads ...

CVE-2023-2699

CVE-2023-2699 affects SourceCodester Lost and Found Information System 1.0. The vulnerability is an SQL injection in the GET parameter handler for admin/?page=items/view_item, caused by unsafely constructed SQL with the id argument. Exploitation can be remote; CVSS metrics in the initial data ind...

CVE-2023-2699 SourceCodester Lost and Found Information System GET Parameter sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Lost and Found Information System 1.0. Affected by this issue is some unknown functionality of the file admin/?page=items/viewitem of the component GET Parameter Handler. The manipulation of the argument id leads ...

CVE-2023-2698 SourceCodester Lost and Found Information System GET Parameter sql injection

A vulnerability classified as critical was found in SourceCodester Lost and Found Information System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=items/manageitem of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

CVE-2023-2698

SourceCodester Lost and Found Information System 1.0 has a SQL injection vulnerability in the GET Parameter Handler at admin/?page=items/manage_item via the id parameter. The issue is exploitable remotely, with public disclosure of exploits. Multiple sources (NVD, Red Hat advisory, CVE lists, and...

Lost and Found Information System SQL注入漏洞

Lost and Found Information System is a lost and found information system by the individual developer oretnom23. A SQL injection vulnerability exists in SourceCodester Lost and Found Information System version 1.0, which stems from a problem in the file admin/?page=items/viewitem of the component...

Lost and Found Information System index.php File SQL Injection Vulnerability

Lost and Found Information System is a lost and found information system. A SQL injection vulnerability exists in Lost and Found Information System v1.0, which originates from the parameter cid in the file items/index.php that lacks validation of externally entered SQL statements. An attacker can...

CVE-2023-2672

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Affected is an unknown function of the file items/view.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch th...

Cross site scripting

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file classes/Master.php?f=saveinquiry of the component Contact Form. The manipulation of the argument fullname/contact/message lea...

CVE-2023-2671

CVE-2023-2671 affects SourceCodester Lost and Found Information System v1.0. The vulnerability is in the Contact Form component, specifically the file classes/Master.php?f=save_inquiry, where manipulation of the fullname, contact, or message parameters leads to cross-site scripting (XSS). The att...

CVE-2023-2671 SourceCodester Lost and Found Information System Contact Form cross site scripting

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file classes/Master.php?f=saveinquiry of the component Contact Form. The manipulation of the argument fullname/contact/message lea...

CVE-2023-2670

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/?page=user/manageuser. The manipulation leads to improper access controls. The attack can be initiated remotely. The explo...