850 matches found
CVE-2020-29214
SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the user to inject SQL payload to bypass the authentication via admin/login.php...
CVE-2021-33469
COVID19 Testing Management System 1.0 is vulnerable to Cross Site Scripting XSS via the "Admin name" parameter...
CVE-2021-27823
An information disclosure vulnerability was discovered in /index.class.php via port 8181 on NetWave System 1.0 which allows unauthenticated attackers to exfiltrate sensitive information from the system...
CVE-2021-27823
An information disclosure vulnerability was discovered in /index.class.php via port 8181 on NetWave System 1.0 which allows unauthenticated attackers to exfiltrate sensitive information from the system...
CVE-2021-27823
CVE-2021-27823 affects NetWave System 1.0 with an information disclosure vulnerability in /index.class.php exposed via port 8181. The issue allows unauthenticated attackers to exfiltrate sensitive information from the system. Documented details indicate network-accessible exposure with a confiden...
CVE-2020-26006
Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting XSS via account.php...
Customer Relationship Management (CRM) System 1.0 Shell Upload Vulnerability
Exploit Title: Customer Relationship Management CRM Unrestricted File Upload unauthenticated Exploit Author: Richard Jones Vendor Homepage: https://www.sourcecodester.com/php/14794/customer-relationship-management-crm-system-php-source-code.html Software Link:...
Customer Relationship Management (CRM) System 1.0 Cross Site Scripting Vulnerability
Exploit Title: Customer Relationship Management CRM System 1.0 - Stored XSS Exploit Author: Richard Jones Vendor Homepage: https://www.sourcecodester.com/php/14794/customer-relationship-management-crm-system-php-source-code.html Software Link:...
Customer Relationship Management (CRM) System 1.0 Shell Upload
Exploit Title: Customer Relationship Management CRM Unrestricted File Upload unauthenticated Date: 11/05/2021 Exploit Author: Richard Jones Vendor Homepage: https://www.sourcecodester.com/php/14794/customer-relationship-management-crm-system-php-source-code.html Software Link:...
Customer Relationship Management (CRM) System 1.0 SQL Injection
Exploit Title: Customer Relationship Management CRM System 1.0 - Admin Bypass SQLi Date: 11/05/2021 Exploit Author: Richard Jones Vendor Homepage: https://www.sourcecodester.com/php/14794/customer-relationship-management-crm-system-php-source-code.html Software Link:...
Customer Relationship Management (CRM) System 1.0 Cross Site Scripting
Exploit Title: Customer Relationship Management CRM System 1.0 - Stored XSS Date: 11/05/2021 Exploit Author: Richard Jones Vendor Homepage: https://www.sourcecodester.com/php/14794/customer-relationship-management-crm-system-php-source-code.html Software Link:...
CVE-2021-29387
Multiple stored cross-site scripting XSS vulnerabilities in Sourcecodester Equipment Inventory System 1.0 allow remote attackers to inject arbitrary javascript via any "Add" sections, such as Add Item , Employee and Position or others in the Name Parameters...
CVE-2021-29388
A stored cross-site scripting XSS vulnerability in SourceCodester Budget Management System 1.0 allows users to inject and store arbitrary JavaScript code in index.php via vulnerable field 'Budget Title'...
CVE-2021-27130
Online Reviewer System 1.0 is affected by a SQL injection vulnerability that stems from an authentication bypass, enabling an attacker to bypass login and potentially upload a reverse shell. The flaw is documented across multiple sources (Red Hat, CNVD/CNNVD, CVE records) as a SQL injection throu...
Sql injection
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter...
CVE-2021-27320
Doctor Appointment System 1.0 is affected by a Blind SQL Injection in contactus.php, exploitable via the firstname parameter by an unauthenticated attacker. The issue arises from improper input handling that allows arbitrary SQL execution, with potential data access/manipulation as described in m...
CVE-2021-27320
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter...
CVE-2021-27319
Summary: CVE-2021-27319 = Blind SQL injection in Doctor Appointment System 1.0, in contactus.php. An unauthenticated attacker can inject SQL through the email parameter, enabling arbitrary queries and potential data exposure/manipulation through the database. Affected software/component: Doctor A...
CVE-2021-27315
Doctor Appointment System 1.0 is affected by a Blind SQL injection in contactus.php, exploitable via the comment parameter. The root cause is lack of input validation on the comment field, allowing an unauthenticated attacker to inject and execute arbitrary SQL commands. Impact described includes...