CVE-2024-46261

cutepng v1.05 was discovered to contain a heap buffer overflow via the cpmake32 function at cutepng.h...

PT-2024-39365 · Unknown · Code-Projects Crud Operation System

Name of the Vulnerable Software and Affected Versions: code-projects Crud Operation System version 1.0 Description: A critical issue was found in the code-projects Crud Operation System. The problem lies in an unknown function of the file updata.php, where the manipulation of the sid argument lea...

Shopkit 安全漏洞

Shopkit is an open source Kirby Cms version 2 integrated commerce solution by Sam Nabi, an individual developer in Canada. A security vulnerability exists in Shopkit version 1.0. An attacker exploited the vulnerability to add a negative number of items to the shopping cart via the qtd parameter i...

Online Accreditation Management 安全漏洞

Online Accreditation Management is an online accreditation management system by Adones Evangelista Individual Developers. A security vulnerability exists in version 1.0 of itsourcecode Online Accreditation Management System, which stems from vulnerability to cross-site scripting attacks and could...

PT-2024-30131 · Unknown · Kashipara Bus Ticket Reservation System

Name of the Vulnerable Software and Affected Versions: Kashipara Bus Ticket Reservation System version 1.0 Description: A Stored Cross Site Scripting XSS issue was found in the "/admin schedule.php" endpoint, allowing remote attackers to execute arbitrary code via the scheduleDurationPHP paramete...

PT-2024-38711 · Unknown · Itsourcecode Online Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Blood Bank Management System version 1.0 Description: A critical issue was found in the itsourcecode Online Blood Bank Management System, affecting some unknown functionality of the file register.php of the component User...

CVE-2024-7740

A vulnerability has been found in wanglongcn ltcms 1.0.20 and classified as critical. This vulnerability affects the function download of the file /api/test/download of the component API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiat...

PayPal,Credit Card and Debit Card Payment SQL注入漏洞

PayPal,Credit Card and Debit Card Payment is a PayPal, Credit Card and Debit Card Payment software by janobe individual developer. A SQL injection vulnerability exists in PayPal,Credit Card and Debit Card Payment version 1.0. An attacker can use this vulnerability to send a specially crafted quer...

PT-2024-25602 · Payment · Payment

Name of the Vulnerable Software and Affected Versions: Payment software versions 1.0 Description: The issue allows an attacker to exploit a SQL injection vulnerability by sending a specially crafted query to the server, potentially retrieving all stored information through the studid parameter in...

Online Blood Bank Management System SQL注入漏洞

Online Blood Bank Management System is itsourcecode open source online blood bank management system. Online Blood Bank Management System version 1.0 exists SQL injection vulnerability , the vulnerability stems from the wrong operation of the parameter user can lead to sql injection...

PT-2024-29474 · Unknown · Neuq Board

Name of the Vulnerable Software and Affected Versions: NEUQ board version 1.0 Description: A Buffer Overflow issue in the password.h component allows a remote attacker to cause a denial of service. Recommendations: For NEUQ board version 1.0, consider restricting access to the password.h componen...

Complaints Report Management System SQL注入漏洞

Complaints Report Management System is a Complaints Report Management System by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Complaints Report Management System version 1.0, which is caused by a SQL injection vulnerability in the id parameter of the...

PT-2024-38157 · Unknown · Itsourcecode Society Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Society Management System version 1.0 Description: A critical issue has been found in the itsourcecode Society Management System. The problem is related to an unknown function in the file /admin/check admin.php, where the...

Employee and Visitor Gate Pass Logging System SQL注入漏洞

Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system developed by Carlo Montero, an individual developer. An SQL injection vulnerability exists in Employee and Visitor Gate Pass Logging System version 1.0, which stems from an incorrect manipulation of the...

PT-2024-37946 · Unknown · Sourcecodester Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Record Management System version 1.0 Description: A critical issue has been found in the SourceCodester Record Management System, affecting the file view info user.php. The manipulation of the id argument leads to SQL injection...

Simple Inventory Management System SQL注入漏洞

Simple Inventory Management System is a simple inventory management system. A SQL injection vulnerability exists in Simple Inventory Management System version 1.0 due to a lack of validation of the parameter orderid against externally entered SQL statements. An attacker can exploit this...

PT-2024-28391 · Unknown · Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: Best House Rental Management System version 1.0 Description: The issue allows attackers to read arbitrary PHP files and access other sensitive information within the application through the Page parameter at "index.php". This is an arbitrary...

WordPress Simple Image Popup Shortcode plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by Francesco Carlucci in WordPress Plugin Simple Image Popup Shortcode versions = 1.0...

Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in Complete Web-Based School Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary SQL commands via the index...

Simple Chat System 跨站脚本漏洞

Simple Chat System is a simple chat system by the individual developer nurhodelta17. A cross-site scripting vulnerability exists in Simple Chat System version 1.0, which stems from the fact that incorrect manipulation of the parameter name can lead to cross-site scripting...