CVE-2024-2766

Campcodes Complete Online Beauty Parlor Management System 1.0 is affected by a SQL injection vulnerability in the /admin/index.php file, caused by unsafely handling the username parameter. The issue can be exploited remotely and has been publicly disclosed. Several connected sources (including Re...

CVE-2024-2712

A vulnerability, which was classified as critical, has been found in Campcodes Complete Online DJ Booking System 1.0. This issue affects some unknown processing of the file /admin/user-search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated...

PT-2024-22018 · Unknown · Campcodes Online Marriage Registration System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Marriage Registration System version 1.0 Description: A critical vulnerability was found in the Campcodes Online Marriage Registration System. This issue affects unknown code in the file /user/search.php. The manipulation of...

CVE-2024-2718

A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/booking-bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. The attack ma...

CVE-2024-2678

CVE-2024-2678 affects Campcodes Online Job Finder System v1.0, specifically the /admin/applicants/controller.php functionality. The root cause is a SQL injection vulnerability via the JOBREGID parameter, which can be exploited remotely. The vulnerability is confirmed across multiple sources (e.g....

CVE-2024-2676

A vulnerability, which was classified as critical, was found in Campcodes Online Job Finder System 1.0. Affected is an unknown function of the file /admin/company/controller.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2024-2674

A vulnerability classified as critical was found in Campcodes Online Job Finder System 1.0. This vulnerability affects unknown code of the file /admin/employee/index.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

CVE-2024-2675

CVE-2024-2675 concerns Campcodes Online Job Finder System 1.0. The issue is a SQL injection in the handling of the id parameter in the file path /admin/company/index.php, caused by improper processing of the input. The vulnerability is described as exploitable remotely, with the exploit publicly ...

CVE-2024-2673

A vulnerability classified as critical has been found in Campcodes Online Job Finder System 1.0. This affects an unknown part of the file /admin/login.php. The manipulation of the argument useremail leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-2671

Campcodes Online Job Finder System 1.0 is affected by a SQL injection in /admin/user/index.php via the id parameter. Root cause: unsanitized input allows remote manipulation, with exploitation disclosed publicly. Impact: confidentiality and possibly data exposure per documented CVSS notes; exploi...

CVE-2024-2576

A vulnerability, which was classified as critical, was found in SourceCodester Employee Task Management System 1.0. This affects an unknown part of the file /update-admin.php. The manipulation of the argument adminid leads to authorization bypass. It is possible to initiate the attack remotely. T...

CVE-2024-2533

A vulnerability, which was classified as problematic, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-users.php. The manipulation of the argument id leads to cross site scripting. The...

CVE-2024-2531

A vulnerability classified as critical has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is an unknown function of the file /admin/update-rooms.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...

CVE-2024-2524

A vulnerability, which was classified as critical, has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. This issue affects some unknown processing of the file /admin/receipt.php. The manipulation of the argument roomid leads to sql injection. The attack may be initiated...

CVE-2024-2516

The CVE relates to MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0 where the vulnerability is in an unspecified part of home.php. The root cause is manipulation of the id parameter, resulting in SQL injection that can be triggered remotely. Multiple connected sources confirm the issue...

Client Details System 1.0 SQL Injection

Exploit Title: CVE-2023-7137ClientDetailsSystem-SQLInjection1 + Date: 2023-26-12 + Exploit Author: Hamdi Sevben + Vendor Homepage: https://code-projects.org/client-details-system-in-php-with-source-code/ + Software Link:...

CVE-2024-24092

The CVE-2024-24092 entry concerns Scholars Tracking System 1.0 by Code-projects.org, where a SQL Injection flaw in login.php enables attackers to run arbitrary code. The root cause is lack of validation/execution of unsanitized SQL statements. Affected software/version: Scholars Tracking System v...

CVE-2024-24093

The CVE-2024-24093 issue affects Code-projects Scholars Tracking System 1.0. A SQL injection vulnerability in the Personal Information Update functionality could let an attacker run arbitrary code, as described across multiple feeds (NVD/Red Hat/CNVD etc.). The core details indicate a high-severi...

CVE-2024-24097

CVE-2024-24097 involves a Cross Site Scripting (XSS) vulnerability in Code-projects Scholars Tracking System 1.0 . The issue stems from insufficient input filtering/escaping in the News Feed, allowing an attacker to inject and execute arbitrary scripts in a victim’s browser. Multiple connected so...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in boyiddha Automated-Mess-Management-System 1.0. Affected by this issue is some unknown functionality of the file /member/memberedit.php. The manipulation of the argument name leads to cross site scripting. The attack may be...