CVE-2022-27927

CVE-2022-27927 affects Microfinance Management System 1.0 in which SQL injection is possible when MySQL is used as the application database. The vulnerable inputs are the course_code and/or customer_number parameters, through which an attacker can issue arbitrary SQL commands to the backend datab...

Sql injection

Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2021-43484

CVE-2021-43484 affects Simple Client Management System 1.0, specifically the create.php file, where remote code execution arises from failure to validate the extension of a file in a request. The vulnerability is documented with a high/severe impact (CVSS v3.1: 9.8, CRITICAL, network access, no u...

CVE-2022-1078

A vulnerability was found in SourceCodester College Website Management System 1.0. It has been classified as critical. Affected is the file /cwms/admin/?page=articles/viewarticle/. The manipulation of the argument id with the input ' and select fromselectsleep10Avx and 'abc' = 'abc with an unknow...

Cross site scripting

A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aqpg/users/login.php of the component My Account Page. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is...

CVE-2022-1076

CVE-2022-1076 affects the Automatic Question Paper Generator System 1.0. The vulnerable component is the file /aqpg/users/login.php, where manipulation of the First Name/Middle Name/Last Name parameters leads to a cross-site scripting (XSS) vulnerability. The vulnerability is described as exploit...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php...

Microfinance Management System 1.0 Cross Site Scripting

Exploit Title: Microfinance Management System 1.0 - Cross-site scripting stored unauthenticated Date: 23/03/2022 Exploit Author: Mr Empy Software Link: https://www.sourcecodester.com/php/14822/microfinance-management-system.html Version: 1.0 Tested on: Linux Title: ================ Microfinance...

Security Bulletin: Vulnerability in Apache Log4j affects IBM Cloud Pak for Data System 1.0

Summary Apache Log4j used by IBM Cloud Pak for Data System 1.0. IBM Cloud Pak for Data System 1.0 has addressed the applicable CVE CVE-2022-23305 Vulnerability Details CVEID: CVE-2022-23305 DESCRIPTION: Apache Log4j is vulnerable to SQL injection. A remote attacker could send specially-crafted SQ...

Design/Logic Flaw

The Online Admission System 1.0 allows an unauthenticated attacker to upload or transfer files of dangerous types to the application through documents.php, which may be used to execute malicious code or lead to code execution...

Home Owners Collection Management System 1.0 Account Takeover

Exploit Title: Home Owners Collection Management System 1.0 - Account Takeover Unauthenticated Date: 9/02/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

Exam Reviewer Management System 1.0 - ‘id’ SQL Injection

Exploit Title: Exam Reviewer Management System 1.0 - ‘id’ SQL Injection Date: 2022-02-18 Exploit Author: Juli Agarwal@agarwaljuli Vendor Homepage: https://www.sourcecodester.com/php/15160/simple-exam-reviewer-management-system-phpoop-free-source-code.html Software Link:...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodtester Hospital's Patient Records Management System 1.0 via the specialization parameter in doctors.php...

Online Project Time Management System 1.0 Cross Site Scripting

Exploit Title: Online Project Time Management System 1.0 - Multiple Stored XSS Authenticated Date: 19/01/2022 Exploit Author: Felipe Alcantara Filiplain Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

CVE-2021-46451

An SQL Injection vulnerabilty exists in Sourcecodester Online Project Time Management System 1.0 via the pid parameter in the loadfile function...

CVE-2021-41929

Cross Site Scripting XSS in Sourcecodester The Electric Billing Management System 1.0 by oretnom23, allows attackers to execute arbitrary code via the about page...

Code injection

Sourcecodester Hospital's Patient Records Management System 1.0 is vulnerable to Insecure Permissions via the id parameter in manageuser endpoint. Simply change the value and data of other users can be displayed...

Sql injection

An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php...

CVE-2021-44244

An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php...

CVE-2021-44244

CVE-2021-44244 affects Sourcecodester Logistic Hub Parcel’s Management System 1.0. The vulnerability is an SQL injection via the username parameter in login.php caused by improper input handling, enabling attacker-controlled input to alter queries. CVSS 3.1 vector shows CRITICAL base score (9.8),...