CVE-2024-34955

CVE-2024-34955 affects Code-projects Budget Management 1.0. The vulnerability is SQL Injection via the delete parameter in the application, with a CVSS v3.1 base score of 9.8 (Critical); impact on confidentiality, integrity, and availability is High. Exploitation is possible without authenticatio...

CVE-2024-34954

Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting XSS via the budget parameter...

CVE-2024-34954

CVE-2024-34954 affects Code-projects Budget Management 1.0. The vulnerability is Cross Site Scripting (XSS) exploitable via the budget parameter. According to the CVE, the base CVSS v3.1 score is 6.1 (Medium): Network attack vector, no privileges, user interaction required, with confidentiality/i...

PT-2024-26269 · Unknown · Code-Projects Budget Management

Name of the Vulnerable Software and Affected Versions: Code-projects Budget Management version 1.0 Description: The issue concerns Cross Site Scripting XSS via the budget parameter. This allows for potential malicious script injection, affecting the security of the application. Recommendations: F...

PT-2024-26270 · Unknown · Code-Projects Budget Management

Name of the Vulnerable Software and Affected Versions: Code-projects Budget Management version 1.0 Description: The issue is related to SQL Injection, which occurs via the delete parameter. This allows for potential manipulation of database queries. Recommendations: For Code-projects Budget...

CVE-2024-33647

A vulnerability has been identified in Polarion ALM All versions V2404.0. The Apache Lucene based query engine in the affected application lacks proper access controls. This could allow an authenticated user to query items beyond the user's allowed projects...

CVE-2024-28279

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...

College Management System SQL注入漏洞

College Management System is a simple project organized by Code Projects. It is used to keep track of students, teachers, subjects, schedules and all things related to the university. An SQL injection vulnerability exists in College Management System version 1.0, which stems from an SQL injection...

PT-2024-3648 · Apache +1 · Apache Lucene +1

Name of the Vulnerable Software and Affected Versions: Polarion ALM versions prior to 2404.0 Description: A vulnerability has been identified in the Apache Lucene based query engine of Polarion ALM, which lacks proper access controls. This could allow an authenticated user to query items beyond t...

CVE-2024-28279

CVE-2024-28279 affects Code-projects Computer Book Store 1.0. The vulnerability is an SQL Injection exploitable via the endpoint book.php?bookisbn=, enabling remote manipulation. Several connected sources confirm the issue and indicate high risk (CVSS v3.1: 7.3, HIGH). Remediation/immediate actio...

CVE-2024-28279

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...

PT-2024-22377 · Unknown · Code-Projects Computer Book Store

Name of the Vulnerable Software and Affected Versions: Code-projects Computer Book Store version 1.0 Description: The issue allows for SQL Injection, which can be exploited via the "book.php?bookisbn=" endpoint. An attacker can manipulate this endpoint remotely. It is estimated that a significant...

Rebar3: Command Injection

Background A sophisticated build-tool for Erlang projects that follows OTP principles. Description Rebar3 is vulnerable to OS command injection via the URL parameter of a dependency specification. Impact A vulnerability has been discovered in Rebar3. Please review the CVE identifier referenced...

GitHub: Access body and title of Internal Repo Issues in Projects

An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed read access to issue content via GitHub Projects. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in versions 3.13.1, 3.12.6, 3.11.12, 3.10.14, and...

CVE-2024-31610

File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file...

CVE-2024-31610

File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file...

CVE-2024-31610

File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file...

Code-Projects Simple School Management System 安全漏洞

Code-Projects Simple School Management System is an open source school management system from Code-Projects. A security vulnerability exists in Code-Projects Simple School Management System v1.0, which originates from a file upload vulnerability in the upload avatars feature. An attacker can...

CVE-2024-31610

CVE-2024-31610 affects Code-Projects Simple School Management System v1.0. The issue is a File Upload vulnerability in the avatar upload function that allows an attacker to execute arbitrary code by uploading a crafted file. Reported metrics indicate a network attack vector with low privileges re...

CVE-2024-32657

Hydra is a Continuous Integration service for Nix based projects. Attackers can execute arbitrary code in the browser context of Hydra and execute authenticated HTTP requests. The abused feature allows Nix builds to specify files that Hydra serves to clients. One use of this functionality is...