PT-2024-38797 · Unknown · Sourcecodester E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester E-Commerce System version 1.0 Description: A critical issue has been found in the SourceCodester E-Commerce System, affecting an unknown function of the file /ecommerce/admin/products/controller.php. The manipulation of the pho...

SourceCodester E-Commerce System 代码问题漏洞

SourceCodester E-Commerce System is an e-commerce system from SourceCodester Inc. A code issue vulnerability exists in SourceCodester E-Commerce System version 1.0 due to an untrusted file upload vulnerability in the photo parameter of the /ecommerce/admin/products/controller.php page...

PT-2024-38151 · Unknown · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Food Ordering System version 1.0 Description: A critical issue has been found in the itsourcecode Online Food Ordering System, where an unknown function of the file editproduct.php is affected. The manipulation of the phot...

Online Food Ordering System 代码问题漏洞

Online Food Ordering System is itsourcecode open source online food ordering system. A code issue vulnerability exists in Online Food Ordering System version 1.0, which stems from an incorrect manipulation of the parameter photo that can lead to unrestricted uploads...

CVE-2024-6373

A vulnerability has been found in itsourcecode Online Food Ordering System up to 1.0 and classified as critical. This vulnerability affects unknown code of the file /addproduct.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be initiated remotely. The...

CVE-2024-6115

A vulnerability classified as critical was found in itsourcecode Simple Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file addroom.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be launched remotely...

Simple Online Hotel Reservation System Code Issue Vulnerability

Simple Online Hotel Reservation System is an online hotel reservation system. A code issue exists in version 1.0 of the Simple Online Hotel Reservation System where an incorrect manipulation of the parameter photo can result in unrestricted file uploads...

PT-2024-37393

Name of the Vulnerable Software and Affected Versions: Simple Online Hotel Reservation System version 1.0 Description: A critical vulnerability has been found in the Simple Online Hotel Reservation System, affecting some unknown functionality of the file edit room.php. The manipulation of the pho...

PT-2024-37392

Name of the Vulnerable Software and Affected Versions: Simple Online Hotel Reservation System version 1.0 Description: A critical vulnerability was found in the Simple Online Hotel Reservation System, affecting an unknown functionality of the file add room.php. The manipulation of the photo...

Simple Online Hotel Reservation System Code Issue Vulnerability

Simple Online Hotel Reservation System is an online hotel reservation system. A code issue exists in version 1.0 of the Simple Online Hotel Reservation System where an incorrect manipulation of the parameter photo can result in unrestricted file uploads...

SourceCodester Student Management System 代码问题漏洞

SourceCodester Student Management System is an online student management system from SourceCodester, Inc. The system provides student information management, announcement management, course management and other functions. A code issue vulnerability exists in SourceCodester Student Management Syst...

The vulnerability of the index.php?module=users/registration&action=save component of the Rukovoditel customer relationship management system allows a attacker to perform XSS attacks.

The vulnerability of the index.php?module=users/registration&action=save component of the Customer Relationship Management system’s administration interface lies in the lack of protection for the website structure when processing the userphoto parameter. Exploiting this vulnerability allows an...

PT-2024-25920 · Unknown · Rukovoditel

Name of the Vulnerable Software and Affected Versions: Rukovoditel versions prior to 3.5.3 Description: The issue allows for XSS via the user photo parameter to My Page. This can potentially lead to malicious script execution. Recommendations: For versions prior to 3.5.3, update to version 3.5.3 ...

Rukovoditel 跨站脚本漏洞

Rukovoditel is a web-based open source project management software from the Rukovoditel team. The software features project management, customer relationship management, and more. A cross-site scripting vulnerability exists in Rukovoditel versions prior to 3.5.3, which stems from allowing...

Rukovoditel 跨站脚本漏洞

Rukovoditel is a web-based open source project management software from the Rukovoditel team. The software features project management, customer relationship management, and more. A cross-site scripting vulnerability exists in Rukovoditel versions prior to 3.5.3, which stems from allowing...

PT-2024-3329 · Unknown · Rukovoditel

Name of the Vulnerable Software and Affected Versions: Rukovoditel versions prior to 3.5.3 Description: The issue is related to a lack of protection for the web page structure when handling the user photo parameter in the "index.php?module=users/registration&action=save" endpoint. This can allow ...

CVE-2024-2849

A vulnerability classified as critical was found in SourceCodester Simple File Manager 1.0. This vulnerability affects unknown code. The manipulation of the argument photo leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

PT-2024-22448 · Sourcecodester · Sourcecodester Simple File Manager

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple File Manager version 1.0 Description: A critical vulnerability was found in the software, affecting unknown code. The manipulation of the photo argument leads to unrestricted upload. The attack can be initiated remotely...

CVE-2024-2059

A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/app/servicecrud.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be...

CVE-2024-2058

A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/product.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be...