PT-2024-38160 · Sourcecodester · Sourcecodester Complaint Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Complaints Report Management System version 1.0 Description: A critical issue has been discovered, affecting the /admin/manage station.php file. The manipulation of the id argument leads to SQL injection, allowing for remote...

CVE-2024-37219

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in PBN Hosting SL Page Builder Sandwich – Front-End Page Builder allows Stored XSS.This issue affects Page Builder Sandwich – Front-End Page Builder: from n/a through 5.1.0...

PT-2024-27387 · Unknown · Page Builder Sandwich

Name of the Vulnerable Software and Affected Versions: Page Builder Sandwich – Front-End Page Builder versions n/a through 5.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS...

PT-2024-37997 · Itsourcecode · Itsourcecode University Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode University Management System version 1.0 Description: A critical issue was found in the Avatar File Handler component of the itsourcecode University Management System, specifically affecting the file /st update.php. The...

PT-2024-37995 · Unknown · Itsourcecode University Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode University Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /view cgpa.php. The manipulation of the argument VR/VN leads to sql injection. The attack may be launched...

PT-2024-37993 · Sourcecodester · Sourcecodester Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Record Management System version 1.0 Description: A vulnerability was found in the SourceCodester Record Management System, affecting an unknown functionality of the file sort1.php. The manipulation of the position argument lea...

Document Management System SQL注入漏洞

Document Management System is a document management system. A SQL injection vulnerability exists in Document Management System version 1.0 due to a lack of validation of externally entered SQL statements in parameter anothercont. An attacker can exploit this vulnerability to execute illegal SQL...

Student Study Center Desk Management System SQL Injection Vulnerability

Student Study Center Desk Management System is a student study management system developed by Carlo Montero. A SQL injection vulnerability exists in Student Study Center Desk Management System version 1.0, which stems from the parameter id of the file /Master.php?f=savestudent that can lead to SQ...

PT-2024-5175 · Unknown · Tailoring Management System

Name of the Vulnerable Software and Affected Versions: Tailoring Management System version 1.0 Description: The issue is related to a lack of protection against SQL query structure exploitation in the templateadd.php file. This allows a remote attacker to execute arbitrary SQL code, gain...

Student Study Center Desk Management System SQL Injection Vulnerability

Student Study Center Desk Management System is a student study management system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in Student Study Center Desk Management System version 1.0, which originates from the parameter id of the file...

Employee and Visitor Gate Pass Logging System Cross-Site Request Forgery Vulnerability

Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system developed by Carlo Montero, an individual developer. A cross-site request forgery vulnerability exists in Employee and Visitor Gate Pass Logging System version 1.0. An attacker could exploit this...

VulnCheck KEV: CVE-2024-37943

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in YITH YITH WooCommerce Ajax Product Filter allows Reflected XSS.This issue affects YITH WooCommerce Ajax Product Filter: from n/a through 5.1.0...

Code-Projects Simple Task List SQL Injection Vulnerability

Code-Projects Simple Task List is a simple task list system from Code-Projects open source. A SQL injection vulnerability exists in Code-Projects Simple Task List version 1.0, which stems from an incorrect manipulation of the parameter username that can lead to sql injection...

Gym Management System SQL Injection Vulnerability

Gym Management System is a gym management system. The system is developed in C and sql server, and features customer and supplier management, product management, sales management, gym membership management, fitness assessment, system logging, database backup and restore, etc. The vulnerability...

PT-2024-27802 · Unknown · Itsourcecode Payroll Management System Project In Php With Source Code

Name of the Vulnerable Software and Affected Versions: Itsourcecode Payroll Management System Project In PHP With Source Code version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the view payslip.php file. This enables attackers to...

Best House Rental Management System Security Vulnerability

Best House Rental Management System is a house rental management system by Mayuri K. Individual developer. A security vulnerability exists in Best House Rental Management System version 1.0, which stems from an arbitrary file read issue that includes a parameter. An attacker can read arbitrary PH...

Jungo WinDriver 安全漏洞

Jungo WinDriver is a device driver development toolkit from Israel's Jungo that supports any device, regardless of its chip vendor, with the ability to focus on the value-added functionality of the driver rather than the operating system internals. A privilege management error vulnerability exist...

Farm Management System SQL注入漏洞

Farm Management System is a farm management system. A SQL injection vulnerability exists in Farm Management System version 1.0, which stems from a lack of validation of externally-entered SQL statements in the parameter pigno/breed/reason in the file /quarantine.php?id=3. An attacker could use th...

PT-2024-37611 · Sourcecodester · Sourcecodester Medicine Tracker System

Name of the Vulnerable Software and Affected Versions: SourceCodester Medicine Tracker System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Medicine Tracker System. This issue affects an unknown part of the file /classes/Users.php?f=register user. The...

PT-2024-37575 · Bethesda · Bethesda Online Reservation System

Name of the Vulnerable Software and Affected Versions: Bethesda Online Reservation System version 1.0 Description: A critical issue has been found in the Bethesda Online Reservation System, affecting some unknown functionality of the file controller.php. The manipulation of the rmtype id argument...