CVE-2024-0884 SourceCodester Online Tours & Travels Management System payment.php exec sql injection

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects the function exec of the file payment.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2024-0884

CVE-2024-0884 affects SourceCodester Online Tours & Travels Management System v1.0. The vulnerability lies in the function exec in the file payment.php, where the argument id manipulation leads to SQL injection. Exploitation can be remote, and public disclosure of the exploit is noted. Connected ...

CVE-2024-0884: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects the function exec of the file payment.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2017-20075 Hindu Matrimonial Script payment.php privileges management

A vulnerability was found in Hindu Matrimonial Script. It has been classified as critical. This affects an unknown part of the file /admin/payment.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

PT-2022-7948

Name of the Vulnerable Software and Affected Versions Hindu Matrimonial Script affected versions not specified Description A critical issue has been found, affecting an unknown part of the file /admin/payment.php. This leads to improper privilege management and can be initiated remotely. The issu...

CVE-2017-20075: Improper Privilege Management

A vulnerability was found in Hindu Matrimonial Script. It has been classified as critical. This affects an unknown part of the file /admin/payment.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

Hindu Matrimonial Script 安全漏洞

A security vulnerability exists in Hindu Matrimonial Script, an online matrimonial service website of PHP Matrimonial Script India, which stems from improper privilege management in /admin/payment.php. No details of the vulnerability are currently available...

PT-2022-19922

Name of the Vulnerable Software and Affected Versions LibreHealth EHR version 2.0.0 Description The issue is related to a lack of sanitization of the payment id parameter in the interfacebilling ew payment.php file via interfacebillingpayment master.inc.php, which leads to SQL injection...

CVE-2021-43631

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointmentno parameter in payment.php...

Sql injection

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointmentno parameter in payment.php...

CVE-2021-43631

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointmentno parameter in payment.php...

PT-2021-23896

Name of the Vulnerable Software and Affected Versions: Projectworlds Hospital Management System version 1.0 Description: The issue allows for SQL injection via the appointment no parameter in the "payment.php" endpoint. Recommendations: For Projectworlds Hospital Management System version 1.0,...

CVE-2021-43631: Improper Neutralization of Special Elements used in an SQL Command

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointmentno parameter in payment.php...

PT-2021-22517

Name of the Vulnerable Software and Affected Versions: Parsian Bank Gateway for Woocommerce WordPress plugin versions up to and including 1.0 Description: The issue allows attackers to inject arbitrary web scripts due to a var dump on $ POST variables found in the...

CVE-2021-39309: Improper Neutralization of Input During Web Page Generation

The Parsian Bank Gateway for Woocommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via and parameter due to a vardump on $POST variables found in the /vendor/dpsoft/parsian-payment/sample/rollback-payment.php file which allows attackers to inject arbitrary web scripts, in...

mijewels.com XSS vulnerability

Open Bug Bounty ID: OBB-367749 Description| Value ---|--- Affected Website:| mijewels.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

sresolutions.com XSS vulnerability

Open Bug Bounty ID: OBB-260079 Description| Value ---|--- Affected Website:| sresolutions.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2017-16791

Name of the Vulnerable Software and Affected Versions caddy versions prior to 7.2.10 Description The issue is caused by insufficient filtration of user-supplied data in the paymillToken HTTP POST parameter passed to the "caddy/Resources/Public/JavaScript/e-payment/paymill/api/php/payment.php" API...

CVE-2017-5963: Improper Neutralization of Input During Web Page Generation

An issue was discovered in caddy for TYPO3 before 7.2.10. The vulnerability exists due to insufficient filtration of user-supplied data in the "paymillToken" HTTP POST parameter passed to the "caddy/Resources/Public/JavaScript/e-payment/paymill/api/php/payment.php" URL. An attacker could execute...

beitrambam.org XSS vulnerability

Vulnerable URL: http://www.beitrambam.org/payment.php?notes=%3C/stYle/%3C/titLe/%3C/teXtarEa/%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.06.2016 Latest check for patch:| 25.06.2016 11:36 GMT Vulnerability type:| XSS Vulnerability...