Best House Rental Management System 安全漏洞

Best House Rental Management System is a house rental management system by Mayuri K. Individual developer. A security vulnerability exists in Best House Rental Management System version 1.0. The vulnerability can be exploited to execute arbitrary code via the "House No" and "Description" paramete...

SUSE CVE-2022-48829

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes iattr::iasize is a lofft, so these NFSv3 procedures must be careful to deal with incoming client size values that are larger than s64max without corrupting the value...

CVE-2024-39314 toy-blog administrative token leaked through the command line parameter

toy-blog is a headless content management system implementation. Starting in version 0.4.3 and prior to version 0.5.0, the administrative password was leaked through the command line parameter. The problem was patched in version 0.5.0. As a workaround, pass --read-bearer-token-from-stdin to the...

PT-2024-27950 · Unknown · Codeprojects Health Care Hospital Management System

Name of the Vulnerable Software and Affected Versions: CodeProjects Health Care hospital Management System version 1.0 Description: The issue is related to a SQL injection vulnerability in the Room Information module. This vulnerability can be exploited via the id parameter. Recommendations: For...

CVE-2024-37798

Cross-site scripting XSS vulnerability in search-appointment.php in the Admin Panel in Phpgurukul Beauty Parlour Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the search input field...

PT-2024-37319 · Unknown · Itsourcecode Online Laundry Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Laundry Management System version 1.0 Description: A critical issue has been found in the itsourcecode Online Laundry Management System, affecting some unknown functionality of the file admin class.php. The manipulation of...

PT-2024-24454 · Unknown · Sourcecodester Online Medicine Ordering System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Medicine Ordering System version 1.0 Description: The issue allows for arbitrary file deletion due to a function in the backend settings that can delete any files, initially intended for deleting pictures. Recommendation...

PT-2024-27071 · Sourcecodester · Sourcecodester Garage Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Gas Agency Management System version 1.0 Description: The issue allows for arbitrary code execution via the editClientImage.php file. This could potentially lead to unauthorized access and control of the system. Recommendations...

PT-2024-33536 · Sourcecodester · Sourcecodester Best Courier Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Courier Management System version 1.0 Description: A problematic issue has been found, affecting an unknown function of the file view parcel.php. The manipulation of the id argument leads to unrestricted upload. This issue...

Campcodes Legal Case Management System 代码问题漏洞

Campcodes Legal Case Management System is a legal case management system from Campcodes, Inc. A code issue vulnerability exists in Campcodes Legal Case Management System version 1.0, which stems from a vulnerability in the /admin/general-setting file...

PT-2024-25754 · Unknown · Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: Computer Laboratory Management System version 1.0 Description: The issue concerns a Cross Site Scripting vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the firstname, middlename, lastname parameters in th...

PT-2024-32932 · Unknown · Kashipara College Management System

Name of the Vulnerable Software and Affected Versions: Kashipara College Management System version 1.0 Description: A critical issue affects the processing of the file submit new faculty.php, where the manipulation of the address argument leads to sql injection. The attack can be initiated...

Campcodes Complete Web-Based School Management System 跨站脚本漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which originates from a cross-site scripting vulnerability in...

Student Management System 安全漏洞

Student Management System is a simple web-based student management software by the individual developer Sk. Amir Hamza of Bangladesh. A security vulnerability exists in Complete Online Student Management System version 1.0, which is caused by a cross-site scripting vulnerability in the FirstRecor...

Warehouse Management System 跨站脚本漏洞

Warehouse Management System is a Warehouse Management System by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Warehouse Management System version 1.0, which is caused by an unknown function in supplier.php, via the...

PT-2024-26484 · Unknown · Campcodes Church Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Church Management System version 1.0 Description: A problematic vulnerability has been found in the system, affecting an unknown part of the file /admin/admin user.php. The manipulation of the firstname argument leads to cross-site...

PT-2024-24127 · Unknown · Sourcecodester Online Graduate Tracer System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Graduate Tracer System version 1.0 Description: The issue concerns SQL Injection via the request parameter in the "admin/fetch gendercs.php" API endpoint. This allows for potential manipulation of database queries...

Computer Laboratory Management System SQL注入漏洞

Computer Laboratory Management System is a computer laboratory management system. A SQL injection vulnerability exists in SourceCodester Computer Laboratory Management System version 1.0, which originates from a SQL injection vulnerability in the parameter id of file...

Online Marriage Registration System 跨站脚本漏洞

Online Marriage Registration System is a website builder that supports online marriage registration. A cross-site scripting vulnerability exists in Online Marriage Registration System version 1.0, which originates from a cross-site scripting XSS vulnerability in the parameter fromdate in file...

CVE-2024-2767

A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be initiated...