CVE-2024-35359: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=viewitem. Manipulating the argument id can result in SQL injection...

CVE-2024-35356: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=saveitem. Manipulating the argument id can result in SQL injection...

Dino Physics School Assistant SQL Injection Vulnerability

Dino Physics School Assistant is an application. A SQL injection vulnerability exists in Dino Physics School Assistant version 2.3, which stems from unrecognized code in /classes/Master.php that causes SQL injection via the parameter id...

CVE-2024-5119: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Event Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php?f=loadregistration. The manipulation of the argument lastid/eventid leads to sql injection. The attack may be initiated...

CVE-2024-31544

A stored cross-site scripting XSS vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by including malicious payloads into “remarks”, “borrowername”, “facultydepartment” parameters in /classes/Master.php?f=saverecord...

CVE-2024-31544

A stored cross-site scripting XSS vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by including malicious payloads into “remarks”, “borrowername”, “facultydepartment” parameters in /classes/Master.php?f=saverecord...

Computer Laboratory Management System security vulnerabilities

Computer Laboratory Management System is a computer laboratory management system. A security vulnerability exists in Sourcecodester Computer Laboratory Management System v1.0 that allows an attacker to execute arbitrary JavaScript code via the remarks, borrowername, facultydepartment parameters i...

CVE-2024-31544: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary JavaScript code by including malicious payloads into “remarks”, “borrowername”, “facultydepartment” parameters in /classes/Master.php?f=saverecord...

CVE-2024-31544

The Computer Laboratory Management System v1.0 is affected by a stored cross-site scripting (XSS) vulnerability. An attacker can execute arbitrary JavaScript code by injecting malicious payloads into the remarks, borrower_name, or faculty_department parameters at the /classes/Master.php?f=save_re...

CVE-2024-3131: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=savecategory. The manipulation of the argument id leads to sql injection. The attack can be initiated...

PT-2024-23957 · Sourcecodester · Sourcecodester Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Laboratory Management System version 1.0 Description: A critical issue has been identified, affecting the /classes/Master.php?f=save category file. The id argument is vulnerable to manipulation, leading to sql injectio...

Music Gallery Site Code Vulnerability

Music Gallery Site is a music gallery site by the individual developer Carlo Montero. A code issue vulnerability exists in SourceCodester Music Gallery Site version 1.0, which stems from a file upload vulnerability in the file classes/Master.php...

CVE-2024-2930: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file classes/Master.php?f=savemusic. The manipulation leads to unrestricted upload. The attack can be launched remotely. The...

Medicine Tracker System SQL Injection Vulnerability

Medicine Tracker System is a medicine tracking system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Medicine Tracking System version 1.0, which stems from some unknown processing in /classes/Master.php that leads to SQL injection via the parameters...

CVE-2023-7123: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracking System 1.0. This issue affects some unknown processing of the file /classes/Master.php? f=savemedicine. The manipulation of the argument id/name/description leads to sql injection. The attack may...

CVE-2023-5925 Campcodes Simple Student Information System Master.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Simple Student Information System 1.0. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument f leads to sql injection. The exploit has been disclosed to the public...

CVE-2023-5925 Campcodes Simple Student Information System Master.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Simple Student Information System 1.0. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument f leads to sql injection. The exploit has been disclosed to the public...

CVE-2023-5925: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Campcodes Simple Student Information System 1.0. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument f leads to sql injection. The exploit has been disclosed to the public...

PT-2023-32423 · Campcodes · Campcodes Simple Student Information System

Name of the Vulnerable Software and Affected Versions: Campcodes Simple Student Information System version 1.0 Description: A critical issue has been found in the processing of the file /classes/Master.php. The manipulation of the argument f leads to sql injection. The exploit has been disclosed ...

CVE-2023-5814

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been classified as critical. This affects an unknown part of the file /classes/Master.php?f=savereminder. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...