Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. Kashipara Music Management System v1.0 has a cross-site request forgery vulnerability, which originates from the /music/ajax.php?action=saveuser page does not adequately verify whether the request is from a trusted use...

Insurance Management System 跨站脚本漏洞

Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A cross-site scripting vulnerability exists in Insurance Management System version 1.0, which stems from an incorrect manipulation of the parameter AGENT ID that results in...

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system by the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System version 1.0, which stems from the manipulation of the parameter CLIENT ID in the file addClient.php that can lead to...

PT-2024-38877 · Unknown · Code-Projects Online Quiz Site

Name of the Vulnerable Software and Affected Versions: code-projects Online Quiz Site version 1.0 Description: A critical issue affects the processing of the file index.php, where the manipulation of the loginid argument leads to SQL injection. The attack can be initiated remotely. The exploit ha...

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. A cross-site request forgery vulnerability exists in Kashipara Music Management System v1.0, which can be exploited by an attacker to spoof a malicious request and trick a victim into clicking on it to perform a...

PT-2024-38840 · Sourcecodester · Sourcecodester Qr Code Bookmark System

Name of the Vulnerable Software and Affected Versions: SourceCodester QR Code Bookmark System version 1.0 Description: A vulnerability was found in the system, affecting some unknown processing of the file /endpoint/delete-bookmark.php. The manipulation of the bookmark argument leads to cross-sit...

CVE-2024-42776

Kashipara Hotel Management System v1.0 is vulnerable to Incorrect Access Control via /admin/users.php...

Kashipara Hotel Management System 安全漏洞

Kashipara Hotel Management System is a hotel management system from Kashipara. An access control error vulnerability exists in Kashipara Hotel Management System v1.0 that can be exploited by an attacker to cause unauthorized operation...

Payroll Management System SQL注入漏洞

Payroll Management System is itsourcecode open source payroll management system. Payroll Management System version 1.0 has a SQL injection vulnerability , the vulnerability stems from the login.php file username parameter has a SQL injection vulnerability...

Kashipara Hotel Management System 安全漏洞

Kashipara Hotel Management System is a hotel management system from Kashipara. A cross-site request forgery vulnerability exists in Kashipara Hotel Management System v1.0, which can be exploited by an attacker to forge a malicious request and trick a victim into clicking on it to perform a...

CVE-2024-42779

An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=savemusic" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a crafted PHP file...

WordPress plugin Flamix 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-30154 · Unknown · Kashipara Music Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: A SQL injection issue in the "/music/ajax.php?action=find music" endpoint allows an attacker to execute arbitrary SQL commands via the search parameter. This enables the attacker to...

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. A SQL injection vulnerability exists in Kashipara Music Management System v1.0, which originates from the lack of validation of the "id" parameter of /music/viewuser.php against external SQL input, and can be exploited...

PT-2024-30155 · Unknown · Kashipara Music Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: The issue allows an attacker to execute arbitrary SQL commands via the pid parameter in the "/music/manage playlist items.php" API endpoint. This enables the attacker to manipulate th...

PT-2024-30156 · Unknown · Kashipara Music Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: A SQL injection issue exists in the "/music/controller.php?page=view music" endpoint, allowing an attacker to execute arbitrary SQL commands via the id parameter. This enables attacke...

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. A file upload vulnerability exists in Kashipara Music Management System version 1.0, which stems from the lack of validation of uploaded files in /music/ajax.php?action=saveplaylist, and can be exploited by an attacker...

itsourcecode Laravel Property Management System 跨站脚本漏洞

Laravel Property Management System is an itsourcecode open source property management system. A cross-site scripting vulnerability exists in version 1.0 of itsourcecode Laravel Property Management System, which originates from a cross-site scripting vulnerability in the Note text parameter of the...

PT-2024-38708 · Unknown · Laravel Property Management System

Name of the Vulnerable Software and Affected Versions: Laravel Property Management System version 1.0 Description: A critical issue affects the upload function of the PropertiesController.php file, allowing for unrestricted file upload through the manipulation of the file argument. This can be...

PT-2024-38707 · Unknown · Sourcecodester Leads Manager Tool

Name of the Vulnerable Software and Affected Versions: SourceCodester Leads Manager Tool version 1.0 Description: A vulnerability has been found in the SourceCodester Leads Manager Tool, affecting unknown code of the file update-leads.php. The manipulation of the phone number argument leads to...