E-Commerce System SQL注入漏洞

Moosikay E-Commerce System is an e-commerce system by the individual developer Arvin Arandilla. A SQL injection vulnerability exists in E-Commerce System version 1.0, which stems from an incorrect manipulation of the parameter id resulting in sql injection...

Simple and Nice Shopping Cart Script 代码问题漏洞

Simple and Nice Shopping Cart Script is simple and nice PHP shopping cart script. A vulnerability exists in SourceCodester Simple and Nice Shopping Cart Script version 1.0, which stems from a problem with the file uploaderm.php, where the operation of the parameter submit results in unrestricted...

PT-2023-16984 · Sourcecodester · Sourcecodester Automatic Question Paper Generator System

Name of the Vulnerable Software and Affected Versions: SourceCodester Automatic Question Paper Generator System version 1.0 Description: A critical issue was found in the GET Parameter Handler component of the users/user/manage user.php file. The manipulation of the id argument leads to SQL...

PT-2023-17006 · Sourcecodester · Sourcecodester Student Study Center Desk Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Study Center Desk Management System version 1.0 Description: A critical vulnerability was found in the Report Handler component of the system. The issue affects an unknown functionality of the file...

CVE-2023-24728

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function...

CVE-2023-27073

A Cross-Site Request Forgery CSRF in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request...

CVE-2022-47147

Cross-Site Request Forgery CSRF vulnerability in Kesz1 Technologies ipBlockList plugin = 1.0 versions...

PT-2023-20934 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: A Cross-Site Request Forgery CSRF issue allows attackers to change user details and credentials via a crafted POST request. Recommendations: For Online Food Ordering System version 1.0,...

Yoga Class Registration System 跨站脚本漏洞

Yoga Class Registration System is a yoga class registration system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in version 1.0 of the SourceCodester Yoga Class Registration System, which stems from cross-site scripting due to misuse of the parameter name...

PT-2023-16950 · Unknown · Sourcecodester Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: A critical issue has been found, affecting the save menu function, which leads to unrestricted upload. The attack can be launched remotely. Recommendations: For SourceCodest...

PT-2023-20935 · Unknown · Bp Monitoring Management System

Name of the Vulnerable Software and Affected Versions: BP Monitoring Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the emailid parameter in the login page. Recommendations: For BP Monitoring Management...

CVE-2023-1363

A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add User Account. The manipulation of the argument username leads to cross site scripting. It is possible to launch the...

Online Pizza Ordering System SQL注入漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in Online Pizza Ordering System version 1.0, which originates from an unknown function in the file category.php in the component GET Parameter Handler,...

PT-2023-16930 · Sourcecodester · Sourcecodester Computer Parts Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Parts Sales and Inventory System version 1.0 Description: A problematic issue was found in the Add User Account component, where the manipulation of the username argument leads to cross-site scripting. This issue can b...

PT-2023-16932 · Unknown · Sourcecodester Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /admin/ajax.php. The manipulation of the username argument leads to SQL injection...

Online Pizza Ordering System SQL注入漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Pizza Ordering System version 1.0, which was discovered to contain an SQL injection vulnerability via the username parameter...

Covid-19 Directory On Vaccination System 跨站脚本漏洞

The Covid-19 Directory On Vaccination System is a COVID-19 information management system by an individual developer in Ndueso Okorie, Nigeria. The system will accurately store and retrieve information about COVID-19 vaccinations in order to control the spread of a pandemic. A cross-site scripting...

SourceCodester Sales Tracker Management System SQL注入漏洞

Sales Tracker Management System is a sales tracker management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Sales Tracker Management System version 1.0 due to unknown functionality in the file filemanager/login.php in the component POST Paramet...

Online Graduate Tracer System SQL注入漏洞

Online Graduate Tracer System is an online graduate tracer system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Online Graduate Tracer System version 1.0, which stems from an incorrect manipulation of the parameter id that leads to SQL injection...

Sales Tracker Management System SQL注入漏洞

Sales Tracker Management System is a sales tracker management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Sales Tracker Management System version 1.0, which stems from some security issues with a function in the file classes/Master.php, which...