575 matches found
CVE-2021-26232
SQL injection vulnerability in SourceCodester Simple College Website v 1.0 allows remote attackers to execute arbitrary SQL statements via the id parameter to news.php...
Sql injection
SQL injection vulnerability in SourceCodester Simple College Website v 1.0 allows remote attackers to execute arbitrary SQL statements via the id parameter to news.php...
CVE-2021-26232
SQL injection vulnerability in SourceCodester Simple College Website v 1.0 allows remote attackers to execute arbitrary SQL statements via the id parameter to news.php...
PT-2021-16973
Name of the Vulnerable Software and Affected Versions SourceCodester Simple College Website version 1.0 Description The issue allows remote attackers to execute arbitrary SQL statements via the id parameter to "news.php" API endpoint. This enables attackers to manipulate database queries,...
CVE-2021-26232: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in SourceCodester Simple College Website v 1.0 allows remote attackers to execute arbitrary SQL statements via the id parameter to news.php...
Sourcecodester Simple College Website SQL Injection Vulnerability (CNVD-2021-95934)
Sourcecodester Simple College Website is a content management system from Sourcecodester. Sourcecodester Simple College Website suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in database-based applications, which can be exploit...
Sourcecodester Simple College Website Code Execution Vulnerability
Sourcecodester Simple College Website is a content management system of Sourcecodester. version 1.0 of Sourcecodester Simple College Website contains a code execution vulnerability that can be exploited by attackers to conduct remote code execution...
CVE-2020-28133
An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in salesinventory/login.php...
CVE-2020-28133: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges via SQL injection in salesinventory/login.php...
PT-2020-16931
Name of the Vulnerable Software and Affected Versions SourceCodester Simple Grocery Store Sales And Inventory System version 1.0 Description An issue was discovered in the web login functionality, allowing authentication bypass. This enables an attacker to gain client privileges via SQL injection...
CVE-2020-25515
Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books New Book , http:///lms/index.php?page=books...
CVE-2020-25515
Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books New Book , http:///lms/index.php?page=books...
CVE-2020-25514: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Simple Library Management System 1.0 is affected by Incorrect Access Control via the Login Panel, http:// /lms/admin.php...
CVE-2020-25515: Unrestricted Upload of File with Dangerous Type
Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books New Book , http:// /lms/index.php?page=books...
PT-2020-16104
Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Library Management System version 1.0 Description The issue concerns insecure permissions, specifically via the "Books New Book" feature, accessible through the "/lms/index.php?page=books" API endpoint. Recommendations Fo...