CVE-2024-8341 SourceCodester Petshop Management System add_user.php unrestricted upload

A vulnerability classified as critical was found in SourceCodester Petshop Management System 1.0. This vulnerability affects unknown code of the file /controllers/adduser.php. The manipulation of the argument avatar leads to unrestricted upload. The attack can be initiated remotely. The exploit h...

CVE-2024-8341

CVE-2024-8341 affects SourceCodester Petshop Management System 1.0. The vulnerability resides in the /controllers/add_user.php file where manipulation of the avatar parameter enables unrestricted file upload. The issue is exploitable remotely and is publicly disclosed. Connected sources confirm t...

CVE-2024-8340 SourceCodester Electric Billing Management System Actions.php sql injection

A vulnerability classified as critical has been found in SourceCodester Electric Billing Management System 1.0. This affects an unknown part of the file /Actions.php?a=login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-8340

CVE-2024-8340 affects SourceCodester Electric Billing Management System 1.0. The vulnerability is a SQL injection in the /Actions.php?a=login endpoint caused by unsafely handling the username parameter, permitting remote exploitation. Public disclosures exist, and several sources (NVD, Red Hat, C...

CVE-2024-8340 SourceCodester Electric Billing Management System Actions.php sql injection

A vulnerability classified as critical has been found in SourceCodester Electric Billing Management System 1.0. This affects an unknown part of the file /Actions.php?a=login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-8339 SourceCodester Electric Billing Management System Connection Code ?page=tracks sql injection

A vulnerability was found in SourceCodester Electric Billing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?page=tracks of the component Connection Code Handler. The manipulation of the argument code leads to sql injection...

CVE-2024-8339 SourceCodester Electric Billing Management System Connection Code ?page=tracks sql injection

A vulnerability was found in SourceCodester Electric Billing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?page=tracks of the component Connection Code Handler. The manipulation of the argument code leads to sql injection...

CVE-2024-8337

A vulnerability, which was classified as problematic, has been found in SourceCodester Contact Manager with Export to VCF 1.0. Affected by this issue is some unknown functionality of the file index.html. The manipulation of the argument contactname leads to cross site scripting. The attack may be...

CVE-2024-8336

A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. Affected by this vulnerability is an unknown functionality of the file /php-music/classes/Master.php?f=deletemusic. The manipulation of the argument id leads to sql injection. The attack can be launched...

CVE-2024-8336

A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. Affected by this vulnerability is an unknown functionality of the file /php-music/classes/Master.php?f=deletemusic. The manipulation of the argument id leads to sql injection. The attack can be launched...

CVE-2024-8337 SourceCodester Contact Manager with Export to VCF index.html cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Contact Manager with Export to VCF 1.0. Affected by this issue is some unknown functionality of the file index.html. The manipulation of the argument contactname leads to cross site scripting. The attack may be...

CVE-2024-8337

The CVE-2024-8337 entry affects SourceCodester Contact Manager with Export to VCF 1.0. The vulnerability is a Cross-Site Scripting in the index.html, caused by manipulating the contact_name argument. Affected functionality is unknown in detail across sources, but multiple documents state the issu...

CVE-2024-8337 SourceCodester Contact Manager with Export to VCF index.html cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Contact Manager with Export to VCF 1.0. Affected by this issue is some unknown functionality of the file index.html. The manipulation of the argument contactname leads to cross site scripting. The attack may be...

CVE-2024-8336 SourceCodester Music Gallery Site Master.php sql injection

A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. Affected by this vulnerability is an unknown functionality of the file /php-music/classes/Master.php?f=deletemusic. The manipulation of the argument id leads to sql injection. The attack can be launched...

CVE-2024-8336 SourceCodester Music Gallery Site Master.php sql injection

A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. Affected by this vulnerability is an unknown functionality of the file /php-music/classes/Master.php?f=deletemusic. The manipulation of the argument id leads to sql injection. The attack can be launched...

CVE-2024-8336

CVE-2024-8336 affects SourceCodester Music Gallery Site 1.0. The vulnerability is a SQL injection in an unknown function at /php-music/classes/Master.php?f=delete_music where the id parameter is manipulated, and the issue can be exploited remotely. The exploit has been disclosed publicly. Multipl...

Water Billing Management System 1.0 Cross Site Request Forgery / File Upload

============================================================================================================================================= | Title : Water Billing Management System 1.0 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0....

SourceCodester Petshop Management System 代码问题漏洞

SourceCodester Petshop Management System is SourceCodester open source a pet store management system . A code issue exists in version 1.0 of the SourceCodester Petshop Management System, which is caused by an unrestricted file upload vulnerability in the avatar parameter of the...

SourceCodester Electric Billing Management System SQL注入漏洞

SourceCodester Electric Billing Management System is an open source electric billing management system from SourceCodester. A SQL injection vulnerability exists in SourceCodester Electric Billing Management System version 1.0, which originates from a SQL injection vulnerability in the username...

SourceCodester Electric Billing Management System SQL注入漏洞

SourceCodester Electric Billing Management System is a SourceCodester open source electric billing management system. A SQL injection vulnerability exists in SourceCodester Electric Billing Management System version 1.0, which originates from an SQL injection vulnerability in the code parameter o...