Sql injection

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...

CVE-2023-50070: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...

CVE-2023-7076: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in slawkens MyAAC up to 0.8.13. It has been declared as problematic. This vulnerability affects unknown code of the file system/pages/bugtracker.php. The manipulation of the argument bug2'subject'/bug2'text'/report'subject' leads to cross site scripting. The attack can b...

Exploit for Code Injection in Apache Ofbiz

CVE-2022-25813: FreeMarker Server-Side Template Injection in A...

Exploit for SQL Injection in Oretnom23 Customer_Support_System

CVE-2023-50070 Customer Support System 1.0 - Multiple SQL in...

PT-2023-35643 · Php · Php

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 1. The crash state involves several functions: pcre get compiled regex cac...

CVE-2023-6766

A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/course.php of the component Delete Course Handler. The manipulation of the argument delid leads to cross-site request forgery...

Cross site request forgery (csrf)

A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/course.php of the component Delete Course Handler. The manipulation of the argument delid leads to cross-site request forgery...

CVE-2023-6766

The CVE affects PHPGurukul Teacher Subject Allocation Management System 1.0, specifically the /admin/course.php component of the Delete Course Handler. Manipulating the delid parameter triggers Cross-Site Request Forgery (CSRF) and can be exploited remotely; the exploit has been publicly disclose...

CVE-2023-6766 PHPGurukul Teacher Subject Allocation Management System Delete Course course.php cross-site request forgery

A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/course.php of the component Delete Course Handler. The manipulation of the argument delid leads to cross-site request forgery...

CVE-2023-6766 PHPGurukul Teacher Subject Allocation Management System Delete Course course.php cross-site request forgery

A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/course.php of the component Delete Course Handler. The manipulation of the argument delid leads to cross-site request forgery...

CVE-2023-6766: Cross-Site Request Forgery (CSRF)

A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/course.php of the component Delete Course Handler. The manipulation of the argument delid leads to cross-site request forgery...

CVE-2023-6653

A vulnerability was found in PHPGurukul Teacher Subject Allocation Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/subject.php of the component Create a new Subject. The manipulation of the argument cid leads to...

Cross site request forgery (csrf)

A vulnerability was found in PHPGurukul Teacher Subject Allocation Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/subject.php of the component Create a new Subject. The manipulation of the argument cid leads to...

CVE-2023-6653 PHPGurukul Teacher Subject Allocation Management System Create a new Subject subject.php cross-site request forgery

A vulnerability was found in PHPGurukul Teacher Subject Allocation Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/subject.php of the component Create a new Subject. The manipulation of the argument cid leads to...

CVE-2023-6653

The CVE-2023-6653 issue affects PHPGurukul Teacher Subject Allocation Management System 1.0, specifically the /admin/subject.php component for creating a new Subject. The root cause is manipulation of the cid parameter, leading to cross-site request forgery (CSRF). The vulnerability can be trigge...

CVE-2023-6649

A vulnerability has been found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file index.php. The manipulation of the argument searchdata with the input alert5 leads to cross site scripting. The attack c...

Cross site scripting

A vulnerability has been found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file index.php. The manipulation of the argument searchdata with the input alert5 leads to cross site scripting. The attack c...

CVE-2023-6649 PHPGurukul Teacher Subject Allocation Management System index.php cross site scripting

A vulnerability has been found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file index.php. The manipulation of the argument searchdata with the input alert5 leads to cross site scripting. The attack c...

CVE-2023-6649

CVE-2023-6649 affects PHPGurukul Teacher Subject Allocation Management System v1.0, specifically the index.php file. The vulnerability is a cross-site scripting (XSS) flaw triggered by manipulating the input parameter in the searchdata argument (e.g., ). The issue is exploitable remotely and, acc...