PT-2024-18683 · Sourcecodester · Sourcecodester Petrol Pump Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Petrol Pump Management Software version 1.0 Description: A critical issue was found in the software, affecting an unknown functionality of the file /admin/app/product.php. The manipulation of the photo argument leads to...

CodeAstro Membership Management System Security Vulnerability

CodeAstro Membership Management System is a membership management system from CodeAstro. A security vulnerability exists in CodeAstro Membership Management System version 1.0, which stems from a parameter Member Photo in the component Add Members Tab that can lead to unrestricted uploads...

CVE-2023-4122

Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...

CVE-2023-4122

Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...

Unrestricted file upload

Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...

CVE-2023-4122

CVE-2023-4122 affects Student Information System v1.0, with an Insecure File Upload vulnerability on the photo parameter of the my-profile page. The underlying issue allows an authenticated attacker to achieve Remote Code Execution on the server hosting the application. Evidence from multiple con...

CVE-2023-4122: Unrestricted Upload of File with Dangerous Type

Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...

PT-2023-27855 · Unknown · Student Information System

Name of the Vulnerable Software and Affected Versions: Student Information System version 1.0 Description: The issue allows an authenticated attacker to obtain Remote Code Execution on the server hosting the application through an Insecure File Upload vulnerability. This vulnerability is...

Shareet - Photo Sharing Social Network SQL Injection Vulnerability

Shareet - Photo Sharing Social Network is a social networking system with photo sharing features. A SQL injection vulnerability exists in Shareet - Photo Sharing Social Network version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands using the 'photo' parameter...

CVE-2017-15979

Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter...

CVE-2017-15979

Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter...

CVE-2017-15979: Improper Neutralization of Special Elements used in an SQL Command

Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter...

CVE-2008-7171

Multiple cross-site scripting XSS vulnerabilities in Lightweight news portal LNP 1.0b allow remote attackers to inject arbitrary web script or HTML via the 1 photo parameter to showphoto.php, 2 potd parameter to showpotd.php, or 3 the Current question field in a vote action to admin.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Lightweight news portal LNP 1.0b allow remote attackers to inject arbitrary web script or HTML via the 1 photo parameter to showphoto.php, 2 potd parameter to showpotd.php, or 3 the Current question field in a vote action to admin.php...

CVE-2008-7171

Multiple cross-site scripting XSS vulnerabilities in Lightweight news portal LNP 1.0b allow remote attackers to inject arbitrary web script or HTML via the 1 photo parameter to showphoto.php, 2 potd parameter to showpotd.php, or 3 the Current question field in a vote action to admin.php...