CVE-2024-5397

CVE-2024-5397 affects itsourcecode Online Student Enrollment System 1.0. The vulnerability resides in instructorSubjects.php where the attacker can manipulate the instructorId parameter to perform SQL injection. It is a remote vulnerability with publicly disclosed exploit information, indicating ...

CVE-2024-5393

A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been classified as critical. This affects an unknown part of the file listofcourse.php. The manipulation of the argument idno leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2024-5392

The CVE-2024-5392 entry concerns itsourcecode Online Student Enrollment System 1.0, where the file editSubject.php is affected. An attacker can manipulate the id parameter to trigger a SQL injection, allowing potentially unauthorized access to or modification of backend data. Multiple connected s...

CVE-2024-5385 oretnom23 Online Car Wash Booking System cross site scripting

A vulnerability, which was classified as problematic, has been found in oretnom23 Online Car Wash Booking System 1.0. This issue affects some unknown processing of the file /admin/?page=user/list. The manipulation of the argument First Name/Last Name with the input confirm document.cookie leads t...

CVE-2024-5381

CVE-2024-5381 affects itsourcecode Student Information Management System 1.0. The vulnerability exists in the file view.php via manipulation of the studentId parameter, causing SQL injection. Exploitation can be remote, and multiple sources report that the exploit has been disclosed publicly. Con...

CVE-2024-5375

A vulnerability has been found in Kashipara College Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file submitstudent.php. The manipulation of the argument address leads to cross site scripting. The attack can be launched...

CVE-2024-5371

CVE-2024-5371 affects Kashipara College Management System 1.0, specifically the submit_enroll_student.php component. The root cause is manipulation of the class_name argument that enables cross-site scripting (XSS). Exploitation is possible remotely and the vulnerability has been disclosed public...

CVE-2024-34928

CVE-2024-34928 affects Campcodes Complete Web-Based School Management System 1.0. A SQL injection flaw exists in /model/update_subject_routing.php via the grade parameter, enabling an attacker to execute arbitrary SQL commands. The vulnerability stems from improper input handling in the stated en...

CVE-2024-5240

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/unreadmsg.php. The manipulation of the argument myindex leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-5238

CVE-2024-5238 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is an SQL injection in an unknown part of /view/timetable_insert_form.php triggered by manipulating the grade parameter. It can be exploited remotely and has publicly disclosed exploit information (...

CVE-2024-5120 SourceCodester Event Registration System sql injection

A vulnerability was found in SourceCodester Event Registration System 1.0. It has been classified as critical. Affected is an unknown function of the file /registrar/?page=registration. The manipulation of the argument e leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-5107

CVE-2024-5107 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability arises from manipulation of the index parameter in the file /view/student_payment_details2.php, enabling SQL injection. It is a remote attack and the exploit has been disclosed publicly. Multiple so...

CVE-2024-5103

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/studentfirstpayment.php. The manipulation of the argument grade leads to sql injection. The attack...

CVE-2024-5099

A vulnerability was found in SourceCodester Simple Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file updateprice.php. The manipulation of the argument ITEM leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2024-5099

CVE-2024-5099 concerns SourceCodester Simple Inventory System 1.0. The vulnerability resides in the file updateprice.php , where manipulating the argument ITEM results in an SQL injection. The issue is exploitable remotely, and public exploit information has been disclosed. Several connected sour...

CVE-2024-5069

The CVE-2024-5069 vulnerability affects SourceCodester Simple Online Mens Salon Management System 1.0, specifically the view_service.php file. Affected functionality allows manipulation of the id argument, leading to SQL injection . The issue can be exploited remotely, and the vulnerability has b...

CVE-2024-4974

A vulnerability, which was classified as problematic, was found in code-projects Simple Chat System 1.0. Affected is an unknown function of the file /register.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-4975

Summary: CVE-2024-4975 affects code-projects Simple Chat System 1.0, specifically the Message Handler component. The connected PT-2024-33661 and related sources confirm a cross-site scripting (XSS) vulnerability that can be triggered remotely. The exploit has been disclosed publicly. Affected com...

CVE-2024-4974

CVE-2024-4974 affects code-projects Simple Chat System 1.0, specifically the /register.php file. The vulnerability arises from manipulation of the name argument, enabling cross-site scripting (XSS). The issue is exploitable remotely, and public disclosure is noted. Multiple connected documents co...

CVE-2024-4932

CVE-2024-4932 : Concrete details show a SQL injection in SourceCodester Simple Online Bidding System 1.0. The vulnerability affects the file /simple-online-bidding-system/admin/index.php?page=manage_user where the id parameter manipulation leads to injection. It allows remote exploitation, and th...