CVE-2024-25312

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/subdelete.php?id=5."...

Online Nurse Hiring System 1.0 - Time-Based SQL Injection

Exploit Title: Online Nurse Hiring System 1.0 - 'bookid' Time-Based SQL Injection Date: 03/10/2023 Exploit Author: Alperen Yozgat Vendor Homepage: https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql Software Link: https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17826...

Unrestricted file upload

Unrestricted File Upload vulnerability in Employee Management System 1.0 allows a remote attacker to execute arbitrary code via the edit-photo.php component...

CVE-2024-1269

A vulnerability has been found in SourceCodester Product Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /supplier.php. The manipulation of the argument suppliername/suppliercontact leads to cross site scripting. The attack can be initiated...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in CodeAstro Restaurant POS System 1.0. Affected by this issue is some unknown functionality of the file createaccount.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched...

Cross site scripting

A vulnerability was found in code-projects Online FIR System 1.0. It has been classified as problematic. This affects an unknown part of the file registercomplaint.php. The manipulation of the argument Name/Address leads to cross site scripting. It is possible to initiate the attack remotely. The...

Cross site scripting

A vulnerability has been found in code-projects Simple Online Hotel Reservation System 1.0 and classified as problematic. This vulnerability affects unknown code of the file addreserve.php of the component Make a Reservation Page. The manipulation of the argument Firstname/Lastname with the input...

CVE-2024-0503

CVE-2024-0503 affects code-projects Online FIR System 1.0, with a vulnerability in the file registercomplaint.php. The manipulation of the parameter Name/Address enables Cross-Site Scripting (XSS) and can be exploited remotely. The exploit has been publicly disclosed (VDB-250611), with several so...

CVE-2024-0499 SourceCodester House Rental Management System index.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester House Rental Management System 1.0. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack may be initiated remotely. T...

CVE-2024-0498

A vulnerability was found in Project Worlds Lawyer Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file searchLawyer.php. The manipulation of the argument experience leads to sql injection. The attack can be launched...

CVE-2024-0487

A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/action/delete-vaccine.php. The manipulation of the argument ref leads to sql injection. The attack may be launched...

Sql injection

A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/action/new-feed.php. The manipulation of the argument typefeed leads to sql injection. It is possible to initiate the attack remotel...

CVE-2024-0484

A vulnerability, which was classified as critical, has been found in code-projects Fighting Cock Information System 1.0. This issue affects some unknown processing of the file admin/action/updatemother.php. The manipulation of the argument agemother leads to sql injection. The attack may be...

CVE-2024-0485

A vulnerability, which was classified as critical, was found in code-projects Fighting Cock Information System 1.0. Affected is an unknown function of the file admin/pages/tables/addcon.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...

CVE-2024-0477

CVE-2024-0477 affects code-projects Fighting Cock Information System 1.0, with a SQL injection vulnerability in /admin/action/update-deworm.php caused by unsafely handling the usage_deworm argument. The issue is exploitable remotely, and the vulnerability has been publicly disclosed. Multiple sou...

CVE-2024-0475

CVE-2024-0475 affects code-projects Dormitory Management System 1.0, specifically the modifyuser.php file where the user_id argument can be manipulated to achieve SQL injection. Multiple connected sources confirm a remote-exploitable vulnerability with high impact on confidentiality, integrity, a...

CVE-2024-0473

The CVE-2024-0473 entry affects code-projects Dormitory Management System 1.0, specifically the comment.php file. The vulnerability arises from unsafely handling the com parameter, enabling SQL injection. It can be exploited remotely, and public exploits have been disclosed. The connected documen...

CVE-2024-0472

Code-projects Dormitory Management System 1.0 is affected in modifyuser.php; the mname parameter manipulation leads to information disclosure. The vulnerability is publicly disclosed (VDB-250577) and has multiple references across CVE records and vendor pages. Details across connected sources con...

CVE-2024-0469

A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file updatepersonalinfo.php. The manipulation of the argument sex leads to sql injection. The attack may be launched remotely. Th...

CVE-2024-0471

CVE-2024-0471 affects code-projects Human Resource Integrated System 1.0 in the /admin_route/dec_service_credits.php file. The root cause is manipulation of the date parameter that enables SQL injection. This vulnerability has been described as critical and is exploitable remotely, with public di...