CVE-2024-10765

Codezips Online Institute Management System (up to 1.0) has a vulnerability in /profile.php where manipulating the old_image parameter enables unrestricted upload. This remote vector is documented across multiple sources (NVD, Red Hat, CVE lists) and is described as a critical issue; exploitation...

CVE-2024-10765 Codezips Online Institute Management System profile.php unrestricted upload

A vulnerability classified as critical was found in Codezips Online Institute Management System up to 1.0. This vulnerability affects unknown code of the file /profile.php. The manipulation of the argument oldimage leads to unrestricted upload. The attack can be initiated remotely. The exploit ha...

CVE-2024-10764

Codezips Online Institute Management System 1.0 contains a critical vulnerability in /pages/save_user.php where manipulating the image parameter enables unrestricted file upload. The issue is remotely exploitable and has been publicly disclosed. Reported details consistently identify the vulnerab...

CVE-2024-10764 Codezips Online Institute Management System save_user.php unrestricted upload

A vulnerability classified as critical has been found in Codezips Online Institute Management System 1.0. This affects an unknown part of the file /pages/saveuser.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...

CVE-2024-10764 Codezips Online Institute Management System save_user.php unrestricted upload

A vulnerability classified as critical has been found in Codezips Online Institute Management System 1.0. This affects an unknown part of the file /pages/saveuser.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...

Codezips Online Institute Management System 安全漏洞

Codezips Online Institute Management System is an open source online institute management system from Codezips. A security vulnerability exists in Codezips Online Institute Management System version 1.0, which stems from mishandling of the parameter oldimage, resulting in unrestricted uploads...

PT-2024-16527 · Unknown · Codezips Online Institute Management System

Name of the Vulnerable Software and Affected Versions: Codezips Online Institute Management System versions up to 1.0 Description: A critical vulnerability was found in the Codezips Online Institute Management System. This issue affects unknown code of the file /profile.php. The manipulation of t...

PT-2024-16526 · Unknown · Codezips Online Institute Management System

Name of the Vulnerable Software and Affected Versions: Codezips Online Institute Management System version 1.0 Description: A critical vulnerability has been found in the Codezips Online Institute Management System. This issue affects an unknown part of the file /pages/save user.php and allows fo...

CVE-2024-10509 Codezips Online Institute Management System login.php sql injection

A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2024-10509 Codezips Online Institute Management System login.php sql injection

A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2024-10509

CVE-2024-10509 affects Codezips Online Institute Management System 1.0. The issue is a SQL injection triggered by manipulating the email parameter in /login.php, allowing remote exploitation. Multiple sources corroborate that the vulnerability is critical with public exploit availability and no a...