21 matches found
CodeAstro Ingredients Stock Management System Injection Vulnerability
CodeAstro Ingredients Stock Management System is a stock management system for ingredients developed by CodeAstro Inc. Version 1.0 of the CodeAstro Ingredients Stock Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of parameter IDs in the...
Itsourcecode Online House Rental System SQL Injection Vulnerability
itsourcecode Online House Rental System is an open-source online housing rental system developed by itsourcecode. Version 1.0 of the itsourcecode Online House Rental System has a SQL injection vulnerability. This vulnerability arises from improper handling of parameter IDs in the...
Itsourcecode Courier Management System SQL Injection Vulnerability
itsourcecode Courier Management System is an open-source courier management system developed by itsourcecode. Version 1.0 of the itsourcecode Courier Management System has a SQL injection vulnerability. This vulnerability stems from incorrect handling of parameter IDs in the file/manageuser.php,...
D-Link DI-8100 stack buffer overflow vulnerability
The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a stack buffer overflow vulnerability. This vulnerability stems from the sprintf function in the file yyxz.asp, which fails to properly handle paramete...
Itsourcecode Courier Management System injection vulnerability
itsourcecode Courier Management System is an open-source courier management system developed by itsourcecode. Version 1.0 of the itsourcecode Courier Management System has a vulnerability related to SQL injection, which arises from the use of unknown functions in the /edituser.php file when...
Pharmacy Sales and Inventory System Cross-site Scripting Vulnerability (CNVD-2026-38011)
The Pharmacy Sales and Inventory System is a pharmacy sales and inventory management system developed by SourceCodester Corporation. The Pharmacy Sales and Inventory System has a cross-site scripting vulnerability, which stems from the handling of parameter IDs in the...
Security vulnerabilities in the Code-Projects Invoice System in Laravel
Code-Projects Invoice System in Laravel is an open-source invoice system developed by Code-Projects. Version 1.0 of the Code-Projects Invoice System in Laravel contained a security vulnerability. This vulnerability stemmed from improper handling of parameter IDs in the Invoice Endpoint component’...
Code-Projects Employee Management System Injection Vulnerability
Code-Projects Employee Management System is an open-source employee management system developed by Code-Projects. Version 1.0 of the Code-Projects Employee Management System has a SQL injection vulnerability. This vulnerability arises from unknown operations on parameter IDs in the...
Code-Projects Simple Content Management System SQL Injection Vulnerability
Code-Projects Simple Content Management System is an open-source simple content management system developed by Code-Projects. Version 1.0 of Code-Projects Simple Content Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of parameter IDs in file...
ITSsourcecode Vehicle Management System SQL Injection Vulnerability
itsourcecode Vehicle Management System is an open-source vehicle management system developed by itsourcecode. Version 1.0 of the itsourcecode Vehicle Management System has a SQL injection vulnerability. This vulnerability arises from the handling of parameter IDs in the /billaction.php file, whic...
Online Reviewer System SQL Injection Vulnerability
The Online Reviewer System is a software application, a online comment system. Version 1.0 of the Online Reviewer System has a SQL injection vulnerability; this vulnerability arises from incorrect handling of parameter IDs in the file/system/system/admins/assessments/pretest/questions-view.php,...
ITSsourcecode School Management System SQL Injection Vulnerability
itsourcecode School Management System is an open-source school management system developed by itsourcecode. Version 1.0 of itsourcecode School Management System has a SQL injection vulnerability. This vulnerability arises from incorrect operations with parameter IDs in the file...
ITSsourcecode School Management System SQL Injection Vulnerability
itsourcecode School Management System is an open-source school management system developed by itsourcecode. Version 1.0 of itsourcecode School Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of parameter IDs in the file...
WordPress ProjectList plugin SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. The WordPress ProjectList plugin suffers from a SQL injection vulnerability that stems from insufficient cleaning and escaping of parameter ids, which can be exploited by a...
WordPress Plugin ProjectList has a SQL injection vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. The WordPress ProjectList plugin suffers from a SQL injection vulnerability that stems from insufficient cleaning and escaping of parameter ids, which can be exploited by a...
SQL Injection Vulnerability in Grocery Sales and Inventory System
Grocery Sales and Inventory System is a software solution for grocery sales and inventory management. This system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements when processing parameter IDs in the file/ajax.php. Attackers can exploit this...
Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38223)
Grocery Sales and Inventory System is a software solution for grocery sales and inventory management. This system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements when processing parameter IDs in the file/manageuser.php. Attackers can exploit...
i-Educar SQL Injection Vulnerability
i-Educar is a free educational software from Portábilis Open Source. A SQL injection vulnerability exists in i-Educar version 2.10 and earlier, which stems from incorrect manipulation of the parameter IDs in the file /module/ComponenteCurricular/view, which could lead to a SQL injection attack...
Lógico y Creativo SQL Injection Vulnerability
Lógico y Creativo is an e-commerce service from Lógico y Creativo Argentina. version 1.0 of Lógico y Creativo is vulnerable to SQL injection, which can be exploited by attackers to manipulate parameter ids to cause sql injection problems...
Logical and Creative SQL Injection Vulnerabilities
Lógico y Creativo is an e-commerce service from Lógico y Creativo Argentina. version 1.0 of Lógico y Creativo is vulnerable to SQL injection, which can be exploited by attackers to manipulate parameter ids to cause sql injection problems...