PT-2024-39571 · Unknown · Code-Projects Supply Chain Management

Name of the Vulnerable Software and Affected Versions: code-projects Supply Chain Management version 1.0 Description: A critical issue has been found in the code-projects Supply Chain Management software. The problem is related to an unknown function in the file /admin/edit manufacturer.php, wher...

CVE-2024-9322: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Supply Chain Management 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/editmanufacturer.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2024-9316 code-projects Blood Bank Management System B+.php sql injection

A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/blood/update/B+.php. The manipulation of the argument Bloodname leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-9316 code-projects Blood Bank Management System B+.php sql injection

A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/blood/update/B+.php. The manipulation of the argument Bloodname leads to sql injection. It is possible to launch the attack remotely. The...

code-projects Blood Bank Management System SQL注入漏洞

Code-Projects Blood Bank Management System is an open source blood bank management system from Code-Projects. A SQL injection vulnerability exists in code-projects Blood Bank Management System version 1.0, which originates from the parameter Bloodname in the file /admin/blood/update/B+.php that c...

CVE-2024-9316: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/blood/update/B+.php. The manipulation of the argument Bloodname leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-39319

aimeos/ai-controller-frontend is the Aimeos frontend controller package for e-commerce projects. Prior to versions 2024.4.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, an insecure direct object reference allows an attacker to disable subscriptions and reviews of another customer. Versions...

CVE-2024-9094

CVE-2024-9094 affects the code-projects Blood Bank System 1.0. The vulnerability is a SQL injection in the file /admin/blood/update/o-.php caused by manipulating the bloodname parameter. It can be exploited remotely, and the exploit has been publicly disclosed. Various connected sources confirm t...

CVE-2024-9094 code-projects Blood Bank System o-.php sql injection

A vulnerability classified as critical was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file /admin/blood/update/o-.php. The manipulation of the argument bloodname leads to sql injection. The attack can be initiated remotely. The exploit has been...

code-projects Blood Bank System SQL注入漏洞

Code-Projects Blood Bank System is an open source blood bank management system from Code-Projects. A SQL injection vulnerability exists in code-projects Blood Bank System version 1.0, which stems from the parameter bloodname in the file /admin/blood/update/o-.php that can lead to SQL injection...

CVE-2024-9094: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file /admin/blood/update/o-.php. The manipulation of the argument bloodname leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-9091: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Student Record System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument regno leads to sql injection. The attack can be launched remotely. The exploi...

CVE-2024-9086 code-projects Restaurant Reservation System filter.php sql injection

A vulnerability classified as critical has been found in code-projects Restaurant Reservation System 1.0. Affected is an unknown function of the file /filter.php. The manipulation of the argument from/to leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-9086 code-projects Restaurant Reservation System filter.php sql injection

A vulnerability classified as critical has been found in code-projects Restaurant Reservation System 1.0. Affected is an unknown function of the file /filter.php. The manipulation of the argument from/to leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-9084 code-projects Blood Bank System bbms.php cross site scripting

A vulnerability classified as problematic was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file bbms.php. The manipulation of the argument fullname/age/bloodgroup/city/phno/gender as part of String leads to cross site scripting. The attack can be...

CVE-2024-9085 code-projects Restaurant Reservation System index.php sql injection

A vulnerability was found in code-projects Restaurant Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument date leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-9080 code-projects Student Record System pincode-verification.php sql injection

A vulnerability was found in code-projects Student Record System 1.0. It has been classified as critical. Affected is an unknown function of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. It is possible to launch the attack remotely. The explo...

CVE-2024-9079

A vulnerability was found in code-projects Student Record System 1.0 and classified as critical. This issue affects some unknown processing of the file /marks.php. The manipulation of the argument coursename leads to sql injection. The attack may be initiated remotely. The exploit has been...

Code-Projects Student Record System SQL注入漏洞

Code-Projects Student Record System is an open source student record system from Code-Projects. A SQL injection vulnerability exists in Code-Projects Student Record System version 1.0, which stems from an incorrect operation of the parameter regno that can lead to SQL injection...

Code-Projects Student Record System SQL注入漏洞

Code-Projects Student Record System is a Code-Projects open source student record system. Code-Projects Student Record System version 1.0 has a SQL injection vulnerability that originates from SQL injection of the pincode parameter in the /pincode-verification.php file...