Auto Dealer Management System SQL Injection Vulnerability

Auto Dealer Management System is a car dealer management system by Carlo Montero Personal Developer. A security vulnerability exists in Auto Dealer Management System v1.0. An attacker can exploit this vulnerability to perform SQL injection attacks...

Online Computer and Laptop Store Path Traversal Vulnerability

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. A path traversal vulnerability exists in Online Computer and Laptop Store v1.0. The vulnerability stems from the fact that the parameter path in the file /classes/Master.php?f=deleteim...

Online Computer and Laptop Store SQL Injection Vulnerability (CNVD-2023-29388)

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter category of...

Online Computer and Laptop Store SQL Injection Vulnerability (CNVD-2023-29387)

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the fi...

Online Computer and Laptop Store SQL Injection Vulnerability (CNVD-2023-29390)

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

Online Computer and Laptop Store SQL Injection Vulnerability (CNVD-2023-29383)

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the fi...

Online Computer and Laptop Store Arbitrary File Upload Vulnerability (CNVD-2023-29392)

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 contains an arbitrary file upload vulnerability, which stems from the lack of valid validation of uploaded files in file/admin/?page=user, and can...

Online Computer and Laptop Store SQL Injection Vulnerability (CNVD-2023-29386)

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the fi...

Online Computer and Laptop Store Cross-Site Scripting Vulnerability (CNVD-2023-29393)

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. A cross-site scripting vulnerability exists in Online Computer and Laptop Store v1.0. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in...

Online Computer and Laptop Store SQL Injection Vulnerability (CNVD-2023-29384)

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of externally entered SQL statements in the parameter...

Online Graduate Tracer System code-related vulnerabilities

Online Graduate Tracer System is an online graduate tracer system by the individual developer Carlo Montero. A code issue vulnerability exists in SourceCodester Online Graduate Tracer System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vend...

Online Graduate Tracer System SQL Injection Vulnerability

Online Graduate Tracer System is an online graduate tracer system by the individual developer Carlo Montero. SourceCodester Online Graduate Tracer System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter id resulting in sql injection...

Yoga Class Registration System Cross-site Scripting Vulnerability

Yoga Class Registration System is a yoga class registration system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in version 1.0 of the SourceCodester Yoga Class Registration System, which stems from cross-site scripting due to misuse of the parameter name...

Online Graduate Tracer System SQL Injection Vulnerability

Online Graduate Tracer System is an online graduate tracer system by the individual developer Carlo Montero. SourceCodester Online Graduate Tracer System version 1.0 suffers from a SQL injection vulnerability that originates from an unknown issue in the file admin/prof.php, which leads to sql...

Online Graduate Tracer System SQL Injection Vulnerability

Online Graduate Tracer System is an online graduate tracer system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Online Graduate Tracer System version 1.0, which stems from an incorrect manipulation of the parameter id that leads to SQL injection...

Evaluating SQL Injection Vulnerabilities in Management Systems

Judging Management System is a judging management system by Carlo Montero, an individual developer. A security vulnerability exists in Judging Management System v1.0, which is caused by an SQL injection in the sid parameter of the /php-jms/updateBlankTxtview.php page...

Simple Customer Relationship Management SQL injection vulnerability

Simple Customer Relationship Management Simple CRM is a simple customer relationship management system by Carlo Montero, a personal developer. A security vulnerability exists in Simple Customer Relationship Management System v1.0, which stems from a SQL injection vulnerability via the parameter...

Simple Customer Relationship Management Cross-Site Script Vulnerability

Simple Customer Relationship Management Simple CRM is a Simple Customer Relationship Management System by Carlo Montero Personal Developer. A security vulnerability exists in Simple Customer Relationship Management System v1.0, which stems from a SQL injection vulnerability via the parameter name...

Music Gallery Site SQL Injection Vulnerability

Music Gallery Site is a music gallery site by Carlo Montero, a personal developer. A SQL injection vulnerability exists in SourceCodester Music Gallery Site version 1.0 due to some unknown processing in the file viewcategory.php, which results in an sql injection via the parameter id...

Online Pizza Ordering System Cross-Site Request Forgery Vulnerability

Online Pizza Ordering System is an online pizza ordering system from the individual developer Carlo Montero. A cross-site request forgery vulnerability exists in SourceCodester Online Pizza Ordering System version 1.0. An attacker could exploit this vulnerability to conduct a cross-site request...