CVE-2024-12956

CVE-2024-12956 affects 1000 Projects Portfolio Management System MCA 1.0. The vulnerability is due to improper handling of the parameter ach_certy in /add_achievement_details.php, enabling unrestricted file upload. This can be triggered remotely and exploitation has been publicly disclosed. Sever...

CVE-2024-12956 1000 Projects Portfolio Management System MCA add_achievement_details.php unrestricted upload

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /addachievementdetails.php. The manipulation of the argument achcerty leads to unrestricted upload. The attack may be initiated remotel...

CVE-2024-12954

A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown part of the file /updateach.php. The manipulation of the argument achcerty leads to unrestricted upload. It is possible to initiate the attack remotely. The...

CVE-2024-12953

A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected by this issue is some unknown functionality of the file /updatepdprocess.php. The manipulation of the argument profile leads to unrestricted upload. The attack may be...

CVE-2024-12953 1000 Projects Portfolio Management System MCA update_pd_process.php unrestricted upload

A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected by this issue is some unknown functionality of the file /updatepdprocess.php. The manipulation of the argument profile leads to unrestricted upload. The attack may be...

CVE-2024-12951

A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /addpersonaldetails.php. The manipulation of the argument profile leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2024-12951

CVE-2024-12951 affects the 1000 Projects Portfolio Management System MCA 1.0. The vulnerability is in an unknown function of the file /add_personal_details.php, where manipulation of the profile argument leads to unrestricted file upload. It can be exploited remotely, and exploits have been publi...

CVE-2024-12951 1000 Projects Portfolio Management System MCA add_personal_details.php unrestricted upload

A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /addpersonaldetails.php. The manipulation of the argument profile leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2024-12951 1000 Projects Portfolio Management System MCA add_personal_details.php unrestricted upload

A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /addpersonaldetails.php. The manipulation of the argument profile leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2024-12949

CVE-2024-12949 affects the code-projects Travel Management System 1.0. The vulnerability is an SQL injection in the unknown code of /package.php caused by improper handling of the subcatid parameter. It is exploitable remotely and the exploit has been disclosed publicly. Impact is described with ...

CVE-2024-12946 1000 Projects Attendance Tracking Management System admin_action.php sql injection

A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. This issue affects some unknown processing of the file /admin/adminaction.php. The manipulation of the argument adminusername leads to sql injection. The attack may be...

CVE-2024-12942

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/adminlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack...

CVE-2024-12942

CVE-2024-12942 affects 1000 Projects Portfolio Management System MCA 1.0. A SQL injection vulnerability exists in an unknown function of /admin/admin_login.php triggered by manipulating the username/password parameters. Attacks can be launched remotely, and the exploit has been publicly disclosed...

CVE-2024-12937

A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. Affected is an unknown function of the file addVariationController.php. The manipulation of the argument qty leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2024-12938

CVE-2024-12938 affects code-projects Simple Admin Panel 1.0, with a vulnerability in the updateOrderStatus.php file. The issue arises from unsafely handling the record argument, leading to SQL injection. Exploitation is described as remote, and public disclosure of the exploit is noted in multipl...

CVE-2024-12938 code-projects Simple Admin Panel updateOrderStatus.php sql injection

A vulnerability has been found in code-projects Simple Admin Panel 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file updateOrderStatus.php. The manipulation of the argument record leads to sql injection. The attack can be launched remotely. The...

CVE-2024-12936 code-projects Simple Admin Panel catDeleteController.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Simple Admin Panel 1.0. This issue affects some unknown processing of the file catDeleteController.php. The manipulation of the argument record leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-12936

code-projects Simple Admin Panel 1.0 is affected by a SQL injection in the catDeleteController.php file. The vulnerability arises from improper handling of the record parameter, allowing an attacker to manipulate this input remotely over the network. Exploitation has been disclosed publicly, indi...

CVE-2024-12935 code-projects Simple Admin Panel editItemForm.php sql injection

A vulnerability classified as critical was found in code-projects Simple Admin Panel 1.0. This vulnerability affects unknown code of the file editItemForm.php. The manipulation of the argument record leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2024-12935

The CVE-2024-12935 entry concerns code-projects Simple Admin Panel 1.0. The vulnerability is a SQL injection in the editItemForm.php file, affecting the argument record and allowing remote exploitation. Multiple sources (NVD, CVE records, and vendor feeds) confirm the flaw and its critical classi...