CVE-2023-7129

The CVE-2023-7129 entry relates to code-projects Voting System 1.0, specifically a vulnerability in the Voters Login function that allows SQL injection by manipulating the voter argument. The vulnerability is described as critical with a public exploit disclosure. Exploitation status is noted in ...

CVE-2023-7129 code-projects Voting System Voters Login sql injection

A vulnerability, which was classified as critical, was found in code-projects Voting System 1.0. Affected is an unknown function of the component Voters Login. The manipulation of the argument voter leads to sql injection. The exploit has been disclosed to the public and may be used. The identifi...

CVE-2023-7128

A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to th...

CVE-2023-7128 code-projects Voting System Admin Login sql injection

A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to th...

CVE-2023-7127

The CVE-2023-7127 entry concerns code-projects Automated Voting System 1.0. The vulnerability affects the Login component where manipulation of the argument idno leads to SQL injection, as described in public disclosures. Exploitation information is present in the source materials, indicating a s...

CVE-2023-7127 code-projects Automated Voting System Login sql injection

A vulnerability classified as critical was found in code-projects Automated Voting System 1.0. This vulnerability affects unknown code of the component Login. The manipulation of the argument idno leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-249130 is...

CVE-2023-7126

A vulnerability classified as critical has been found in code-projects Automated Voting System 1.0. This affects an unknown part of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to the public and may...

Sql injection

A vulnerability classified as critical has been found in code-projects Automated Voting System 1.0. This affects an unknown part of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to the public and may...

CVE-2023-7126

The CVE-2023-7126 entry affects code-projects Automated Voting System 1.0, specifically the Admin Login component’s /admin/ path. The root cause is a SQL injection via the username parameter in the Admin Login workflow, with public exploitation noted. Mitigations documented in connected sources i...

Cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument keyword with the input leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2023-7124

CVE-2023-7124 affects code-projects E-Commerce Site 1.0. the vulnerability is in an unknown function of search.php, where the keyword parameter can be crafted as to trigger a cross-site scripting (XSS). The issue is exploitable remotely and the exploit has been disclosed publicly. Connected sour...

PT-2023-32896 · Unknown · Code-Projects Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Record Management System version 1.0 Description: A problematic issue has been discovered, affecting an unknown function of the file /main/offices.php of the component Offices Handler. The manipulation of the argument officename...

PT-2023-32892 · Code Projects · Code-Projects Intern Membership Management System

Name of the Vulnerable Software and Affected Versions: code-projects Intern Membership Management System version 2.0 Description: A critical issue was found in the User Registration component, specifically in the /user registration/ file. The manipulation of the userName argument leads to SQL...

Improper Authorization

gitlab:sid is a vulnerable of improper authorization. The vulnerability due to effect of GitLab CE/EE and it does not performs an authorization check when an actor attempts to access. It leads to improper authorization by allow an attacker to leak the owner's Sentry instance projects...

PT-2023-32886 · Unknown · Code-Projects E-Commerce Website

Name of the Vulnerable Software and Affected Versions: code-projects E-Commerce Site version 1.0 Description: A problematic issue was found in the code-projects E-Commerce Site, affecting an unknown function of the file search.php. The manipulation of the keyword argument with the input leads to...

Unauthorized Access

GitLab is vulnerable to Unauthorized Access.The vulnerability is caused due to improper access controls. This could allows an attacker to access sensitive information within private projects,configurations, and other confidential data associated with CI/CD jobs...

CVE-2023-7111

A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. Affected is an unknown function of the file index.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

Sql injection

A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. Affected is an unknown function of the file index.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-7111

The CVE-2023-7111 entry describes a SQL injection in code-projects Library Management System 2.0, affecting the category parameter in index.php. Multiple connected sources confirm remote exploitation and public disclosure (VDB-249006). The underlying issue is lack of input validation in the categ...

CVE-2023-7111 code-projects Library Management System index.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. Affected is an unknown function of the file index.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit has been...