EUVD-2024-31845

Malicious code in bioql PyPI...

CVE-2024-3259 SourceCodester Internship Portal Management System delete_activity.php sql injection

A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/deleteactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be initiated...

CVE-2024-3259 SourceCodester Internship Portal Management System delete_activity.php sql injection

A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/deleteactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be initiated...

CVE-2024-3258

CVE-2024-3258 affects SourceCodester Internship Portal Management System 1.0, specifically the admin/add_activity.php file. The issue is a SQL injection via the title/description/start/end parameters, exploitable remotely. Public disclosure exists; multiple sources reference an exploit and public...

CVE-2024-3257 SourceCodester Internship Portal Management System edit_activity_query.php sql injection

A vulnerability was found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/editactivityquery.php. The manipulation of the argument title/description/start/end leads to sql injection. The...

CVE-2024-3254

CVE-2024-3254 affects SourceCodester Internship Portal Management System 1.0. SQL injection via the admin/edit_admin.php file’s admin_id parameter is the root cause. The issue is exploitable remotely and has public disclosures. Connected sources do not provide a confirmed patch version; one PT Se...

CVE-2024-3253 SourceCodester Internship Portal Management System add_admin.php sql injection

A vulnerability classified as critical was found in SourceCodester Internship Portal Management System 1.0. This vulnerability affects unknown code of the file admin/addadmin.php. The manipulation of the argument name/username/password leads to sql injection. The attack can be initiated remotely...

CVE-2024-3252

SourceCodester Internship Portal Management System 1.0 contains a SQL injection in the admin/check_admin.php file triggered by the username/password parameters. The vulnerability allows remote exploitation with high impact to confidentiality, integrity, and availability; CVSSv3.1 base score up to...

CVE-2024-3258: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin/addactivity.php. The manipulation of the argument title/description/start/end leads to sql injection. It is possible to initiate...

CVE-2024-3257: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/editactivityquery.php. The manipulation of the argument title/description/start/end leads to sql injection. The...

CVE-2024-3252: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Internship Portal Management System 1.0. This affects an unknown part of the file admin/checkadmin.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-3259: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/deleteactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be initiated...

CVE-2024-3254: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Internship Portal Management System 1.0. This issue affects some unknown processing of the file admin/editadmin.php. The manipulation of the argument adminid leads to sql injection. The attack may be initiated...

CVE-2024-3255: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Internship Portal Management System 1.0. Affected is an unknown function of the file admin/editadminquery.php. The manipulation of the argument username/password/name/adminid leads to sql injection. It is possible to...

CVE-2024-3253: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Internship Portal Management System 1.0. This vulnerability affects unknown code of the file admin/addadmin.php. The manipulation of the argument name/username/password leads to sql injection. The attack can be initiated remotely...

CVE-2024-3256: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/editactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be...