CVE-2024-24097

CVE-2024-24097 involves a Cross Site Scripting (XSS) vulnerability in Code-projects Scholars Tracking System 1.0 . The issue stems from insufficient input filtering/escaping in the News Feed, allowing an attacker to inject and execute arbitrary scripts in a victim’s browser. Multiple connected so...

CVE-2024-24092

SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via login.php...

Scholars Tracking System 安全漏洞

Scholars Tracking System is a scholars tracking system by the individual developer Fabian Ros. Scholars Tracking System version 1.0 suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements, which can be exploited by an...

CVE-2024-24097

Cross Site Scripting XSS vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed...

CVE-2024-24101

Affected software: Code-projects Scholars Tracking System 1.0. Vulnerability: SQL Injection in Eligibility Information Update. Root cause not explicitly stated in the provided documents. Impact (as stated): High confidentiality, integrity, and availability impact per NVD CVSS v3.1 metrics (9.8 CR...

CVE-2024-24101

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...

CVE-2024-24093

SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...

Scholars Tracking System 安全漏洞

Scholars Tracking System is a scholars tracking system by the individual developer Fabian Ros. Scholars Tracking System version 1.0 suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be...

CVE-2024-24101

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...

CVE-2024-24093

SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...

CVE-2024-24093

The CVE-2024-24093 issue affects Code-projects Scholars Tracking System 1.0. A SQL injection vulnerability in the Personal Information Update functionality could let an attacker run arbitrary code, as described across multiple feeds (NVD/Red Hat/CNVD etc.). The core details indicate a high-severi...

CVE-2024-24092

The CVE-2024-24092 entry concerns Scholars Tracking System 1.0 by Code-projects.org, where a SQL Injection flaw in login.php enables attackers to run arbitrary code. The root cause is lack of validation/execution of unsanitized SQL statements. Affected software/version: Scholars Tracking System v...

CVE-2024-24097

Cross Site Scripting XSS vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed...

Scholars Tracking System SQL Injection Vulnerability

Scholars Tracking System is a scholars tracking system by the individual developer Fabian Ros. Scholars Tracking System version 1.0 suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements, which can be exploited by an...

[SECURITY] Fedora 40 Update: apache-ivy-2.5.2-4.fc40

Apache Ivy is a tool for managing recording, tracking, resolving and reporting project dependencies. It is designed as process agnostic and is not tied to any methodology or structure. while available as a standalone tool, Apache Ivy works particularly well with Apache Ant providing a number of...

Input validation

Canarytokens helps track activity and actions on a network. Canarytokens.org supports exporting the history of a Canarytoken's incidents in CSV format. The generation of these CSV files is vulnerable to a CSV Injection vulnerability. This flaw can be used by an attacker who discovers an HTTP-base...

CVE-2024-28111 CSV Injection in exported history CSV files

Canarytokens helps track activity and actions on a network. Canarytokens.org supports exporting the history of a Canarytoken's incidents in CSV format. The generation of these CSV files is vulnerable to a CSV Injection vulnerability. This flaw can be used by an attacker who discovers an HTTP-base...

BIT-GITLAB-2020-13319

An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check for adding time spent on an issue...

BIT-GITLAB-2020-13336

An issue has been discovered in GitLab affecting versions from 11.8 before 12.10.13. GitLab was vulnerable to a stored XSS by in the error tracking feature...

BIT-GITLAB-2022-2244

An improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows project memebers with reporter role to manage issues in project's error tracking feature...