Simple CRUD Functionality Security Vulnerability

Simple CRUD Functionality is a web application. A security vulnerability exists in code-projects Simple CRUD Functionality v1.0, which stems from an SQL injection vulnerability that allows attackers to run arbitrary SQL commands via the title parameter...

Exploit for Cross-Site Request Forgery (CSRF) in Remyandrade Sticky_Notes_App

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1...

Online Matrimonial Project SQL Injection Vulnerability

Online Matrimonial Project is an online matrimonial program. A SQL injection vulnerability exists in Online Matrimonial Project v1.0 where certain parameters are not validated or escaped before they are used in a stitched SQL statement...

Online Job Portal SQL Injection Vulnerability

Online Job Portal is an online job portal for janobe individual developers. A SQL injection vulnerability exists in Online Job Portal v1.0 where certain parameters are not validated or escaped before they are used in a stitched SQL statement...

ZOHO ManageEngine Desktop Central Injection Vulnerability

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. An injection...

CVE-2023-45345

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

Simple Student Information System SQL Injection Vulnerability

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. A SQL injection vulnerability exists in Simple Student Information System version 1.0, which ste...

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the id parameter on the routers/add-ticket.php page...

Simple Student Information System Cross-Site Scripting Vulnerability

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. A cross-site scripting vulnerability exists in Campcodes Simple Student Information System versi...

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system developed by Carlo Montero. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the price parameter on the routers/menu-router.php page, resulting in a SQL injection...

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the role parameter on the routers/user-router.php page, resulting in a SQL...

Simple Student Information System SQL Injection Vulnerability

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. A SQL injection vulnerability exists in Simple Student Information System version 1.0, which ste...

PT-2023-29455 · Unknown · Online Examination System

Name of the Vulnerable Software and Affected Versions: Online Examination System version 1.0 Description: The issue concerns multiple Open Redirect vulnerabilities. Specifically, the q parameter of the "feed.php" resource is vulnerable, allowing an attacker to redirect a victim user to an arbitra...

Best Courier Management System Cross-Site Scripting Vulnerability

Best Courier Management System is a courier management system by Mayuri K. Individual developer. A security vulnerability exists in Best Courier Management System v1.0, which stems from a cross-site scripting XSS vulnerability in the change username field...

PT-2023-29213 · Unknown · Online Art Gallery

Name of the Vulnerable Software and Affected Versions: Online Art Gallery version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the add3 parameter of the header.php resource does not validate the characters received, and they are sent...

PT-2023-28957 · Unknown · Online Art Gallery

Name of the Vulnerable Software and Affected Versions: Online Art Gallery version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the fnm parameter of the header.php resource does not validate the characters received, and they are sent...

Projectworlds Online Art gallery project SQL Injection Vulnerability

Projectworlds Online Art gallery project is an online art gallery project by Projectworlds India. A SQL injection vulnerability exists in Projectworlds Online Art gallery project v1.0, which stems from the lnm parameter in header.php that does not validate incoming characters and sends them...

CVE-2023-26583

Unauthenticated SQL injection in the GetCurrentPeriod method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers...

CVE-2023-27260

Unauthenticated SQL injection in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers...

WenwenaiCMS Security Vulnerabilities

WenwenaiCMS is a content management system for PwnCYN individual developers. A security vulnerability exists in WenwenaiCMS version v.1.0, which stems from an insecure privilege vulnerability that allows remote attackers to elevate privileges...