98 matches found
PT-2023-16919 · Sourcecodester · Sourcecodester Computer Parts Sales/Inventory System
Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Parts Sales and Inventory System version 1.0 Description: A critical vulnerability has been found in the system, affecting an unknown part of the file cust transac.php. The manipulation of the phonenumber argument lead...
PT-2023-16874 · Unknown · Sourcecodester File Tracker Manager System
Name of the Vulnerable Software and Affected Versions: SourceCodester File Tracker Manager System version 1.0 Description: A problematic issue was found in the SourceCodester File Tracker Manager System, affecting an unknown part of the file normal/borrow1.php. The manipulation of the id argument...
CVE-2023-24653
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the oldpass parameter under the Change Password function...
Online Tours & Travels Management System SQL注入漏洞
Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Online Tours & Travels Management System version 1.0, which stems from an incorrect manipulation of the parameter bookingid that can lead to sq...
PT-2022-27165 · Unknown · Automotive Shop Management System
Name of the Vulnerable Software and Affected Versions: Automotive Shop Management System version 1.0 Description: The issue allows deletion of any file via the "/asms/classes/Master.php?f=delete img" API endpoint. Recommendations: For Automotive Shop Management System version 1.0, as a temporary...
PT-2022-25395 · Unknown · Phpgurukul Blood Bank & Donor Management System
Name of the Vulnerable Software and Affected Versions: Phpgurukul Blood Donor Management System version 1.0 Description: The issue allows Cross Site Scripting via the Add Blood Group Name Feature. Recommendations: For Phpgurukul Blood Donor Management System version 1.0, consider disabling the Ad...
CVE-2022-43226
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/?page=appointments/viewappointment...
PT-2022-26767 · Unknown · Online Diagnostic Lab Management System
Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/appointments/update status.php" API endpoint...
PT-2022-26314 · Unknown · Open Source Sacco Management System
Name of the Vulnerable Software and Affected Versions: Open Source SACCO Management System version 1.0 Description: The issue concerns SQL Injection via the "/sacco shield/manage loan.php" API endpoint. This allows for potential unauthorized access and manipulation of data. No information is...
CVE-2022-36582
An arbitrary file upload vulnerability in the component /phpaction/createProduct.php of Garage Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-32330
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=deletemenu...
Automotive Shop Management System SQL注入漏洞
Automotive Shop Management System is an automotive shop management system. version 1.0 of Automotive Shop Management System contains a security vulnerability that could be exploited to dump all database credentials and gain administrator access...
Badminton Center Management System 跨站脚本漏洞
Badminton Center Management System is a badminton center management system by Carlo Montero personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records. A security vulnerability exists in Badminton Center Management System...
CVE-2022-28106
Online Sports Complex Booking System v1.0 was discovered to allow attackers to take over user accounts via a crafted POST request...
Multi Store Inventory Management System 安全漏洞
Multi Store Inventory Management System is a multi-store inventory management system. version 1.0 of Multi Store Inventory Management System contains an information disclosure vulnerability that could be exploited by attackers to access sensitive files...
CVE-2022-30370
Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=deletecargotype...
PT-2022-19039 · Unknown · Red Planet Laundry Management System
Name of the Vulnerable Software and Affected Versions: Red Planet Laundry Management System version 1.0 Description: The issue is related to SQL Injection. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...