53 matches found
CVE-2024-10336 SourceCodeHero Clothes Recommendation System Admin Login Page index.php sql injection
A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/index.php of the component Admin Login Page. The manipulation of the argument t1 leads to sql injection. The attack may be...
CVE-2024-10336
CVE-2024-10336 affects SourceCodeHero Clothes Recommendation System 1.0. The vulnerability is a SQL injection in the Admin Login Page, specifically via the t1 parameter in the file /admin/index.php. Root cause: improper handling of user input leading to injection of SQL statements. Impact, as sta...
CVE-2024-10336 SourceCodeHero Clothes Recommendation System Admin Login Page index.php sql injection
A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/index.php of the component Admin Login Page. The manipulation of the argument t1 leads to sql injection. The attack may be...
SourceCodeHero Clothes Recommendation System SQL注入漏洞
SourceCodeHero Clothes Recommendation System is a SourceCodeHero open source clothing recommendation system. A SQL injection vulnerability exists in SourceCodeHero Clothes Recommendation System version 1.0, which stems from the parameter view/view1 in the file /admin/home.php that can lead to SQL...
CVE-2024-10337: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in SourceCodeHero Clothes Recommendation System 1.0. Affected is an unknown function of the file /admin/home.php?con=add. The manipulation of the argument cat/subcat/ t1/t2/text leads to sql injection. It is possible to launch the attack...
SourceCodeHero Clothes Recommendation System SQL注入漏洞
SourceCodeHero Clothes Recommendation System is a SourceCodeHero open source clothing recommendation system. SourceCodeHero Clothes Recommendation System version 1.0 suffers from a SQL injection vulnerability, which originates from the parameter t1 in the file /admin/index.php of the component...
SourceCodeHero Clothes Recommendation System 安全漏洞
SourceCodeHero Clothes Recommendation System is an open source clothing recommendation system from SourceCodeHero. A security vulnerability exists in SourceCodeHero Clothes Recommendation System version 1.0, which originates from the parameter cat/subcat/t1/t2/text in the file...
PT-2024-16198
Name of the Vulnerable Software and Affected Versions SourceCodeHero Clothes Recommendation System version 1.0 Description A critical issue was found in the system, affecting an unknown functionality of the file /admin/home.php. The manipulation of the view argument, specifically view1, leads to...
PT-2024-16196
Name of the Vulnerable Software and Affected Versions SourceCodeHero Clothes Recommendation System version 1.0 Description A critical issue affects the Admin Login Page component, specifically the /admin/index.php file, where the manipulation of the t1 argument leads to SQL injection. This issue...
CVE-2024-10338: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/home.php. The manipulation of the argument view/view1 leads to sql injection. The attack can be launched remotely. Th...
CVE-2024-10336: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/index.php of the component Admin Login Page. The manipulation of the argument t1 leads to sql injection. The attack may be...
CVE-2024-44728
Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact in /clientdetails/admin/regester.php...
CVE-2024-44727
Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...
CVE-2024-44728
Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact in /clientdetails/admin/regester.php...
Sourcecodehero Event Management System 安全漏洞
Sourcecodehero Event Management System is an open source event management system from Sourcecodehero. A security vulnerability exists in the Sourcecodehero Event Management System version 1.0, which stems from a vulnerability that allows storage via the Full Name, Address, Email, and contact...
CVE-2024-44728
Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact in /clientdetails/admin/regester.php...
CVE-2024-44727
Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...
CVE-2024-44727
Sourcecodehero Event Management System 1.0 is vulnerable to an SQL Injection via the username parameter in /event/admin/login.php. Documented across multiple feeds; no patch/version fix details are provided in the supplied materials. Exploitation details, impact, and mitigations beyond the generi...
CVE-2024-44727
Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...
PT-2024-31224 · Unknown · Sourcecodehero Event Management System
Name of the Vulnerable Software and Affected Versions: Sourcecodehero Event Management System version 1.0 Description: The issue is related to a SQL Injection vulnerability via the parameter username in the "/event/admin/login.php" endpoint. This allows attackers to remotely compromise databases...