850 matches found
PT-2023-19728 · Unknown · Simple Customer Relationship Management System
Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management System version 1.0 Description: A SQL injection issue was found in the Profile Update function, specifically via the name parameter. Recommendations: For Simple Customer Relationship Management System...
CVE-2023-1569
A vulnerability classified as problematic was found in SourceCodester E-Commerce System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/user/controller.php?action=edit. The manipulation of the argument UNAME with the input alert'1' leads to cross site scripting...
CVE-2023-1561
The CVE-2023-1561 entry concerns code-projects’ Simple Online Hotel Reservation System 1.0. Affected is an unknown function in add_room.php where manipulation leads to unrestricted file uploads. The vulnerability enables remote exploitation, per the provided description, with no explicit remediat...
Design/Logic Flaw
A vulnerability classified as critical has been found in Simple and Beautiful Shopping Cart System 1.0. This affects an unknown part of the file uploadera.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the publ...
CVE-2023-1507
CVE-2023-1507 affects SourceCodester E-Commerce System 1.0, specifically the Category Name Handler’s file /ecommerce/admin/category/controller.php. The vulnerability arises from manipulating the CATEGORY argument, enabling cross-site scripting (XSS). It can be exploited remotely, and the exploit ...
CVE-2023-1503
CVE-2023-1503 affects SourceCodester Alphaware Simple E-Commerce System 1.0. A SQL injection vulnerability exists in the admin/admin_index.php file, triggered by manipulating the username/password inputs (example payload: admin' AND (SELECT 8062 FROM (SELECT(SLEEP(5)))meUD)-- hLiX). The issue all...
CVE-2023-1485
CVE-2023-1485 is an XSS vulnerability in SourceCodester Young Entrepreneur E-Negosyo System 1.0, arising from the GET parameter handler in /bsenordering/index.php where manipulating category with enables a remote XSS attack. Affected: SourceCodester Young Entrepreneur E-Negosyo System 1.0, file ...
CVE-2023-1480
CVE-2023-1480 affects SourceCodester Monitoring of Students Cyber Accounts System v1.0, specifically the login.php file in the POST Parameter Handler. The vulnerability arises from manipulation of the un parameter, which leads to SQL injection. This issue can be exploited remotely; public exploit...
CVE-2023-1467
CVE-2023-1467 affects SourceCodester Student Study Center Desk Management System 1.0. The vulnerability resides in the POST Parameter Handler, specifically Master.php?f=delete_img, where manipulating the path argument (e.g., C%3A%2Ffoo.txt) enables path traversal. The issue is exploitable remotel...
CVE-2023-1460
A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file admin/ajax.php?action=saveuser of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to...
CVE-2023-1447
CVE-2023-1447 affects SourceCodester Medicine Tracker System 1.0. A cross-site scripting vulnerability exists in the endpoint app/?page=medicines/manage_medicine, triggered by manipulating the name/description argument with input like . The issue can be exploited remotely against an unknown funct...
Cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Online Student Management System 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2023-1394
Affected software: SourceCodester Online Graduate Tracer System 1.0. Vulnerable component: bsitemp.php, using mysqli_query. Root cause: improper handling of the id parameter enables SQL injection, reported as remotely exploitable with a publicly disclosed exploit (VDB-222981). Impact is high (per...
Sql injection
A vulnerability classified as critical has been found in SourceCodester Computer Parts Sales and Inventory System 1.0. This affects an unknown part of the file custtransac.php. The manipulation of the argument phonenumber leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2023-1308
A vulnerability classified as critical has been found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/adminlog.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has be...
CVE-2023-1311
CVE-2023-1311 : Vulnerability in SourceCodester Friendly Island Pizza Website and Ordering System 1.0, specifically in the file large.php under the GET Parameter Handler. The manipulation of the GET parameter id leads to SQL injection. The issue can be exploited remotely and the exploit has been ...
CVE-2023-1308
SourceCodester Online Graduate Tracer System 1.0 is affected, specifically the admin/adminlog.php function where the user parameter is manipulated, leading to SQL injection. The vulnerability allows remote exploitation and the exploit has been publicly disclosed (CVE-2023-1308, VDB-222696). Root ...
CVE-2023-27211
A cross-site scripting XSS vulnerability in /admin/navbar.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter...