3577 matches found
Online-College-Event-Hall-Reservation-System Security Vulnerability
Online-College-Event-Hall-Reservation-System is an online college event hall reservation system by Magesh K individual developer. Designed to automate the hall booking process to eliminate manual logging and increase efficiency. A security vulnerability exists in...
CVE-2024-28847
OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. Similarly to the GHSL-2023-250 issue, AlertUtil::validateExpression is also called from EventSubscriptionRepository.prepare,...
CVE-2023-41504
SQL Injection vulnerability in Student Enrollment In PHP 1.0 allows attackers to run arbitrary code via the Student Search function...
Hotel Booking Management Security Breach
Hotel Booking Management is a database web application for hotel booking management by Pratham Personal Developer. A security vulnerability exists in Hotel Booking Management v1.0, which was discovered to contain an SQL injection vulnerability through the npss parameter in rooms.php...
PT-2024-18933 · Sourcecodester · Sourcecodester Online Mobile Management Store
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Mobile Management Store version 1.0 Description: A critical issue has been found in the software, affecting some unknown functionality of the file /admin/product/manage product.php. The manipulation of the id argument...
Petrol Pump Management Software SQL Injection Vulnerability
Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A SQL injection vulnerability exists in Petrol Pump Management Software version 1.0, which stems from an SQL injection issue in the /admin/editsupplier.php file...
CVE-2024-1928
A vulnerability, which was classified as critical, has been found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-admin.php of the component Edit User Profile Page. The manipulation of the argument Fullname lea...
CVE-2024-1927
A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin/login.php. The manipulation of the argument txtpassword leads to sql injection. The attack can be launched...
CVE-2023-7110
A vulnerability, which was classified as critical, has been found in code-projects Library Management System 2.0. This issue affects some unknown processing of the file login.php. The manipulation of the argument student leads to sql injection. The attack may be initiated remotely. The exploit ha...
E-Commerce Website SQL Injection Vulnerability
E-Commerce Website is an e-commerce website. A SQL injection vulnerability exists in E-Commerce Website version 1.0, which stems from the presence of SQL injection...
Osclass Security Vulnerabilities
Osclass is an open source content management system CMS based on PHP and MySQL for creating and managing classified ads websites. A security vulnerability exists in Osclass version 5.1.2, which stems from vulnerability to SQL injection attacks...
WordPress Plugin MoveTo SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin MoveTo suffers from a SQL...
PT-2024-21193 · Miniorange · Miniorange Malware Scanner
Name of the Vulnerable Software and Affected Versions: miniorange Malware Scanner versions through 4.7.2 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows for potential exploitation by injecting...
PT-2024-18104 · WordPress · Wp Ecommerce
Name of the Vulnerable Software and Affected Versions: WP eCommerce plugin for WordPress versions up to, and including, 3.15.1 Description: The issue is related to time-based blind SQL Injection via the cart contents parameter due to insufficient escaping on the user-supplied parameter and lack o...
CVE-2024-24095
Code-projects Simple Stock System 1.0 is vulnerable to SQL Injection...
Simple Student Attendance System SQL Injection Vulnerability
Simple Student Attendance System is a simple student attendance system. A SQL injection vulnerability exists in Simple Student Attendance System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...
Inventory Management System SQL Injection Vulnerability
Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which stems from an incorrect operation of the parameter customer that can lead to an SQL injectio...
Nagios XI SQL Injection Vulnerability
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. Nagios XI version 2024R1.01 suffers from a SQL injection vulnerability that originates from allowing remot...
PT-2024-18303 · Limbas · Limbas
Name of the Vulnerable Software and Affected Versions: Limbas version 5.2.14 Description: A vulnerability was found in an unknown functionality of the file main admin.php. The manipulation of the tab group argument leads to sql injection. The complexity of an attack is rather high, and the...