Online Piggery Management System v1.0 - Unauthenticated File Upload

Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenticated user can upload a php file by sending a POST request to add-pig.php. id: CVE-2023-37629 info: name: Online Piggery Management System v1.0 - Unauthenticated File Upload author: Harsh severity: critical descriptio...

EUVD-2023-41511

Malicious code in bioql PyPI...

CVE-2023-37629

Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenticated user can upload a php file by sending a POST request to "add-pig.php."...

Online Piggery Management System v1.0 - unauthenticated file upload vulnerability

!/bin/bash Exploit Title: Online Piggery Management System v1.0 - unauthenticated file upload vulnerability Date: July 12 2023 Exploit Author: 1337kid Software Link: https://www.sourcecodester.com/php/11814/online-pig-management-system-basic-free-version.html Version: 1.0 Tested on: Ubuntu CVE :...

Online Piggery Management System Arbitrary File Upload Vulnerability

Online Piggery Management System is an online pig management system by Lewa Personal Developer. Online Piggery Management System v1.0 has an arbitrary file upload vulnerability, the vulnerability stems from the lack of effective validation of add-pig.php for uploaded files, which can be exploited...

CVE-2023-37628

Online Piggery Management System 1.0 is vulnerable to SQL Injection...

CVE-2023-37628

Online Piggery Management System 1.0 is vulnerable to SQL Injection...

CVE-2023-37630

Online Piggery Management System 1.0 is vulnerable to Cross Site Scripting XSS. An unauthenticated user can POST JavaScript code to "manage-breed.php" resulting in Persistent XSS...

Cross site scripting

Online Piggery Management System 1.0 is vulnerable to Cross Site Scripting XSS. An unauthenticated user can POST JavaScript code to "manage-breed.php" resulting in Persistent XSS...

Sql injection

Online Piggery Management System 1.0 is vulnerable to SQL Injection...

PT-2023-26050 · Unknown · Online Piggery Management System

Name of the Vulnerable Software and Affected Versions: Online Piggery Management System version 1.0 Description: The issue allows an unauthenticated user to upload a php file by sending a POST request to the "add-pig.php" endpoint. This enables potential malicious activities. Recommendations: For...

CVE-2023-37630

Online Piggery Management System 1.0 is vulnerable to Cross Site Scripting (XSS). An unauthenticated user can POST JavaScript code to manage-breed.php, leading to persistent XSS. This is described consistently across multiple sources. The exact impact is persistent, and no exploitation details be...

PT-2023-26049

Name of the Vulnerable Software and Affected Versions Online Piggery Management System version 1.0 Description The issue is related to SQL Injection. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

CVE-2023-37629

Online Piggery Management System v1.0 is vulnerable to unauthenticated file upload via add-pig.php, caused by insufficient validation of uploaded files. An attacker can upload a PHP shell, potentially enabling remote code execution and full server compromise (unrestricted file upload widely demon...

CVE-2023-37629: Unrestricted Upload of File with Dangerous Type

Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenticated user can upload a php file by sending a POST request to "add-pig.php."...

PT-2023-26051

Name of the Vulnerable Software and Affected Versions Online Piggery Management System version 1.0 Description The issue allows an unauthenticated user to perform a Cross Site Scripting XSS attack by posting JavaScript code to the "manage-breed.php" endpoint, resulting in Persistent XSS...

CVE-2023-37628

CVE-2023-37628 affects Online Piggery Management System 1.0. The vulnerability is described as a SQL Injection, with a CVSS v3.1 base score of 9.8 (CRITICAL), requiring no privileges and no user interaction, impacting confidentiality, integrity, and availability. A PoC/exploit is referenced in a ...

CVE-2023-37628: Improper Neutralization of Special Elements used in an SQL Command

Online Piggery Management System 1.0 is vulnerable to SQL Injection...

CVE-2023-37630: Improper Neutralization of Input During Web Page Generation

Online Piggery Management System 1.0 is vulnerable to Cross Site Scripting XSS. An unauthenticated user can POST JavaScript code to "manage-breed.php" resulting in Persistent XSS...