CVE-2024-22568

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/score/del...

PT-2024-15151

Name of the Vulnerable Software and Affected Versions WP Recipe Maker plugin for WordPress versions up to, and including, 9.1.0 Description The issue is related to Reflected Cross-Site Scripting via the 'Referer' header due to insufficient input sanitization and output escaping. This allows...

Atlassian Confluence Security Vulnerability

Atlassian Confluence is a suite of specialized enterprise knowledge management and collaboration software from Atlassian Australia that can also be used to build enterprise WiKi. A security vulnerability exists in Atlassian Confluence Data Center and Server that stems from the presence of a remot...

CXBSoft Post-Office SQL Injection Vulnerability

CXBSoft Post-Office is a post office system from CXBSoft. A SQL injection vulnerability exists in CXBSoft Post-Office 1.0 and earlier versions, which originates from a SQL injection vulnerability in the parameter usernamelogin in the file /apps/loginauth.php...

PT-2024-15644 · Unknown · Codeastro Real Estate Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Real Estate Management System versions up to 1.0 Description: A critical vulnerability has been found in the CodeAstro Real Estate Management System. This issue affects an unknown part of the file propertydetail.php. The manipulatio...

CVE-2023-51062

creationtimestamp| type| source ---|---|--- 2024-01-13 05:31:43+00:00| seen| https://t.me/ctinow/167683 2024-01-15 13:09:31+00:00| seen| https://t.me/arpsyndicate/2784 2024-02-03 07:41:23+00:00| seen| https://t.me/ctinow/178412 2025-06-16 19:40:51+00:00| published-proof-of-concept|...

PT-2024-15619 · Sourcecodester · Sourcecodester Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester House Rental Management System version 1.0 Description: A critical issue was found in the SourceCodester House Rental Management System, affecting some unknown functionality of the file manage user.php of the component Edit Use...

PT-2024-15620 · Unknown · Code-Projects Online Fir System

Name of the Vulnerable Software and Affected Versions: code-projects Online FIR System version 1.0 Description: A vulnerability was found in the code-projects Online FIR System, affecting an unknown part of the file registercomplaint.php. The manipulation of the argument Name/Address leads to...

PT-2024-15609 · Unknown · Kashipara Billing

Name of the Vulnerable Software and Affected Versions: Kashipara Billing Software version 1.0 Description: A critical issue was found in the HTTP POST Request Handler component, specifically in the file buyer detail submit.php. The manipulation of the gstn no argument leads to sql injection. This...

Austin security breach

Austin is a message push platform. A security vulnerability exists in ZhongFuCheng3y Austin version 1.0, which originates from a security issue in the getFile function in the com/java3y/austin/web/controller/MaterialController.java in the component Upload Material Menu. function in the component...

Fighting Cock Information System SQL Injection Vulnerability

Fighting Cock Information System is a chicken information system by chrisjelo individual developer. code-projects Fighting Cock Information System version 1.0 suffers from a SQL injection vulnerability that originates from a SQL injection vulnerability in the /admin/action/update-deworm.php file...

Taokeyun SQL Injection Vulnerability

Taokeyun is a shopping mall system by jifeer individual developer. A SQL injection vulnerability exists in Taokeyun version 1.0.5 and earlier versions, which originates from a SQL injection vulnerability in the cid parameter of the index function in the application/index/controller/m/Drs.php file...

Human Resource Integrated System SQL Injection Vulnerability

Human Resource Integrated System is a human resource integration system. A SQL injection vulnerability exists in code-projects Human Resource Integrated System version 1.0, which stems from a SQL injection vulnerability in the /adminroute/incservicecredits.php file...

PT-2024-15577 · Code Projects · Code-Projects Faculty Management System

Name of the Vulnerable Software and Affected Versions: code-projects Faculty Management System version 1.0 Description: A critical issue affects the processing of the file /admin/pages/student-print.php, leading to sql injection. The attack may be initiated remotely. Recommendations: For...

PT-2024-11897 · Unknown · Qkmc-Rk Redbbs

Name of the Vulnerable Software and Affected Versions: qkmc-rk redbbs version 1.0 Description: A problematic issue was found in the Nickname Handler component, leading to cross-site scripting. The attack can be launched remotely. Recommendations: For qkmc-rk redbbs version 1.0, consider disabling...

Hozard alarm system security breach

Hozard alarm system is an alarm system from Hozard. A security vulnerability exists in Hozard alarm system alarmsystemen version v1.0, which originates from a remote keyless system that sends the same RF signal for each request, and can be exploited by an attacker to conduct a replay attack and...

PHPJabbers Meeting Room Booking System Security Vulnerability

PHPJabbers Meeting Room Booking System is a meeting room booking system from the Serbian company PHPJabbers. A security vulnerability exists in PHPJabbers Meeting Room Booking System version 1.0, which originates from a CSV injection vulnerability...

DeShang DSShop Access Control Error Vulnerability

DeShang DSShop is a single-store mobile mall online store system from DeShang, China. The access control error vulnerability exists in DeShang DSShop prior to version 3.1.0. The vulnerability stems from the file public/install.php of the component HTTP GET Request Handler, which results in...

PT-2024-15521 · Unknown · Sourcecodester Simple Student Attendance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Attendance System version 1.0 Description: A critical vulnerability was found in the SourceCodester Student Attendance System. The issue affects an unknown function of the file attendance report.php. The manipulation of...

Simple Student Attendance System SQL Injection Vulnerability

Simple Student Attendance System is a simple student attendance system. A SQL injection vulnerability exists in Student Attendance System version 1.0, which stems from an incorrect manipulation of the parameter classid that can lead to sql injection...