PT-2024-17795 · Unknown · Codezips Project Management System

Name of the Vulnerable Software and Affected Versions: Codezips Project Management System version 1.0 Description: A critical vulnerability was found in the Codezips Project Management System. It affects an unknown functionality of the file /pages/forms/advanced.php. The manipulation of the name...

PT-2024-17786 · Unknown · 1000 Projects Attendance Tracking Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Attendance Tracking Management System version 1.0 Description: A critical issue affects the processing of the file /admin/course action.php. The manipulation of the course code argument leads to SQL injection. The attack may be...

code-projects Online Exam Mastering System 注入漏洞

Code-Projects Online Exam Mastering System is a Code-Projects open source online exam system. An injection vulnerability exists in code-projects Online Exam Mastering System version 1.0, which is caused by an SQL injection into the parameter eid...

PT-2024-17775 · Unknown · Codezips E-Commerce Site

Name of the Vulnerable Software and Affected Versions: Codezips E-Commerce Website version 1.0 Description: A critical issue affects some unknown functionality of the file /login.php. The manipulation of the email argument leads to SQL injection. The attack may be launched remotely. The exploit h...

PT-2024-36535 · Unknown · Codeastro Complaint Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Complaint Management System version 1.0 Description: The issue allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the "delete.php" component. This is a result of a SQL injection...

Code-Projects Hostel Management Site 代码注入漏洞

Code-Projects Hostel Management Site is an open source hotel management website by Code-Projects. A code injection vulnerability exists in Code-Projects Hostel Management Site version 1.0, which stems from a cross-site scripting vulnerability in the room-details.php file...

PT-2024-17733 · Itsourcecode · Itsourcecode Vehicle Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Vehicle Management System version 1.0 Description: A problem has been found in the itsourcecode Vehicle Management System, classified as problematic. This issue affects some unknown processing of the file /billaction.php. The...

CodeAstro Complaint Management System 安全漏洞

CodeAstro Complaint Management System is a complaint management system from CodeAstro. A security vulnerability exists in CodeAstro Complaint Management System version v1.0, which originates from a remote attacker who can elevate privileges via the mess-view.php component...

PHPGurukul Online Birth Certificate System 安全漏洞

Online Birth Certificate System is an online birth certificate system. Online Birth Certificate System suffers from an HTML injection vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute...

PHPGurukul Online Birth Certificate System 安全漏洞

Online Birth Certificate System is an online birth certificate system. An unauthorized access vulnerability exists in the Online Birth Certificate System that stems from inadequate password requirements and can be exploited by an attacker to gain unauthorized access to a user's account...

WordPress plugin Floating Video Player 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

PT-2024-36480 · Unknown · Online Nurse Hiring System

Name of the Vulnerable Software and Affected Versions: Online Nurse Hiring System version 1.0 Description: A stored cross-site scripting XSS issue in the /admin/profile.php component allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the fullname...

WordPress plugin Go Animate 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

WordPress Critical Site Intel plugin <= 1.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Critical Site Intel versions = 1.0...

Malicious code in openai-realtime-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63903b0e2f2b97ef7bde23b987c10da50353b221fdaa4036434af2c3c6e1ab47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-33324

Missing Authorization vulnerability in wppal Easy Captcha easy-captcha allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Captcha: from n/a through = 1.0...

Malicious code in vscode-reh-rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 645c7a216c974ca0e1e77bbdfbbd3659bf3ea42e681d987c858de32c8f3bcc34 The OpenSSF Package Analysis project identified 'vscode-reh-rce' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in yir-image-gen-asana-rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 050cc0b4f55e2e2b44e9eaeb0b6b269c8eab27bb007239d6fc7cb318e55f475d The OpenSSF Package Analysis project identified 'yir-image-gen-asana-rce' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

WordPress Go Animate plugin <= 1.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Go Animate versions = 1.0...

Apache Superset 安全漏洞

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. A security vulnerability exists in Apache Superset versions prior to 4.1.0 that stems from improper authorization, which allows an attacker with SQLLab access to construct specially crafted SQL D...