CVE-2023-5930

A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/students/manageacademic.php. The manipulation of the argument studentid leads to cross site scripting. The attack can be...

Sql injection

A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/students/manageacademic.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public a...

CVE-2023-5924

The CVE-2023-5924 entry refers to Campcodes Simple Student Information System 1.0 with a SQL injection in /admin/courses/view_course.php via the id parameter. Public exploit details exist. CVSSv3.1 base score 7.5 (HIGH) with Network attack, no user interaction, and HIGH confidentiality impact but...

CVE-2023-5923

CVE-2023-5923 — Campcodes Simple Student Information System 1.0 is affected by a SQL injection in an unknown part of /admin/index.php, triggered by manipulating the id parameter. The vuln is described as critical and is accompanied by public disclosure of exploits. The available connected sources...

Out-of-bounds

A vulnerability was found in code-projects Admission Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file studentavatar.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been...

CVE-2023-5814

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been classified as critical. This affects an unknown part of the file /classes/Master.php?f=savereminder. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2023-5805

CVE-2023-5805 corresponds to a SQL injection in SourceCodester Simple Real Estate Portal System 1.0, caused by unsafely handling the id parameter in view_estate.php. Exploitation can be remote and public disclosures exist. Affected component: view_estate.php (and variations in naming). Root cause...

CVE-2023-5804

CVE-2023-5804 affects PHPGurukul Nipah Virus Testing Management System v1.0. The vulnerability lies in login.php where manipulation of the username parameter enables SQL injection. It is described as accessible remotely and could impact authentication data (C/I/A) as stated across sources. Connec...

Out-of-bounds

A vulnerability was found in CodeAstro POS System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /profil of the component Profile Picture Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The...

PT-2023-32341 · Unknown · Sourcecodester Simple Real Estate Portal System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Real Estate Portal System version 1.0 Description: A critical issue has been found, affecting an unknown function of the file view estate.php. The manipulation of the id argument leads to SQL injection. This issue can be...

CVE-2023-5699

CVE-2023-5699 : CodeAstro Internet Banking System 1.0 contains a cross-site scripting (XSS) issue in the pages_view_client.php file. The vulnerability arises from unsafely handling the acc_name parameter, where crafted input (e.g., Johnnie Reyes'"()&%) can lead to script execution in a victim’s b...

Sql injection

A vulnerability was found in CodeAstro Internet Banking System 1.0 and classified as critical. This issue affects some unknown processing of the file pagesresetpwd.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2023-5305

CVE-2023-5305 affects Online Banquet Booking System 1.0, specifically the /mail.php in the Contact Us Page. The issue arises from improper handling of the message parameter, enabling cross-site scripting. The attack surface is remote, with no privileges required and user interaction required. Sev...

Cross site scripting

A vulnerability, which was classified as problematic, was found in Online Banquet Booking System 1.0. Affected is an unknown function of the file /view-booking-detail.php of the component Account Detail Handler. The manipulation of the argument username leads to cross site scripting. It is possib...

CVE-2023-5269

A vulnerability was found in SourceCodester Best Courier Management System 1.0. It has been classified as critical. Affected is an unknown function of the file parcellist.php of the component GET Parameter Handler. The manipulation of the argument id/s leads to sql injection. The exploit has been...

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...

CVE-2023-5260

The CVE-2023-5260 issue affects SourceCodester Simple Membership System 1.0, specifically the group_validator.php file where manipulating the club_id argument causes SQL injection. Documents indicate the attack can be initiated remotely and that exploits have been publicly disclosed. Connected so...

CVE-2023-4846

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file deletemember.php. The manipulation of the argument memid leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2023-4846

CVE-2023-4846 affects SourceCodester Simple Membership System 1.0. The vulnerability is a SQL injection in the file delete_member.php, caused by manipulating the mem_id argument. It can be exploited remotely and has been publicly disclosed. Multiple sources describe this as a critical issue with ...

CVE-2023-4749

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been...