CVE-2024-57698

An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes without authentication, even after initial configuration and password change. This happens due to excessive exposure of information and the lack of adequate access control on the...

PHPGurukul Online Nurse Hiring System 安全漏洞

PHPGurukul Online Nurse Hiring System is an online nurse hiring system from PHPGurukul, Inc. A security vulnerability exists in version 1.0 of the PHPGurukul Online Nurse Hiring System that stems from improper handling of the file /admin/edit-nurse.php, which could lead to a SQL injection attack...

PHPGurukul Notice Board System 注入漏洞

Notice Board System is a bulletin board system. A SQL injection vulnerability exists in the Notice Board System, which originates from the lack of validation of externally entered SQL statements in the /category.php file with the parameter catname. An attacker can exploit this vulnerability to...

itsourcecode Placement Management System 注入漏洞

itsourcecode Placement Management System is an open source placement management system from itsourcecode. An injection vulnerability exists in version 1.0 of itsourcecode Placement Management System, which originates from a SQL injection due to incorrect manipulation of the parameter Name in the...

Code-Projects Patient Record Management System 安全漏洞

Code-Projects Patient Record Management System is an open source patient record management system from Code-Projects. A security vulnerability exists in Code-Projects Patient Record Management System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter...

CodeAstro Membership Management System 注入漏洞

CodeAstro Membership Management System is a membership management system from CodeAstro. An injection vulnerability exists in CodeAstro Membership Management System version 1.0, which is caused by SQL injection due to the operation of the parameter ID in the file renew.php?id=6...

itsourcecode Placement Management System 注入漏洞

itsourcecode Placement Management System is an open source placement management system by itsourcecode. An injection vulnerability exists in version 1.0 of itsourcecode Placement Management System, which originates from a SQL injection due to incorrect manipulation of the parameter drivetitle in...

PHPGurukul COVID19 Testing Management System 安全漏洞

The COVID19 Testing Management System is a new crown pneumonia testing management system. The COVID19 Testing Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter searchdata in the file...

PHPGurukul COVID19 Testing Management System 注入漏洞

The COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter contactno in the file...

PHPGurukul COVID19 Testing Management System 注入漏洞

The PHPGurukul COVID19 Testing Management System is a new Crown Pneumonia Testing Management System from PHPGurukul, Inc. An injection vulnerability exists in version 1.0 of the PHPGurukul COVID19 Testing Management System, which stems from SQL injection due to incorrect manipulation of the...

CVE-2025-3968

A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /api.php. The manipulation of the argument catid leads to sql injection. The attack can be initiated remotely. The exploit has been...

Books-Management-System 安全漏洞

Books-Management-System is a book management system by withstars individual developers. A security vulnerability exists in Books-Management-System version 1.0, which stems from a misbehavior in the file /allreaders.html resulting in a missing authorization...

JSite 代码注入漏洞

JSite is JSite open source a backend management system rapid development framework . JSite 1.0 and previous versions of the code injection vulnerability , the vulnerability stems from the file /sys/office/save parameter Remarks in the wrong operation leads to cross-site scripting...

Books-Management-System 安全漏洞

Books-Management-System is a book management system by withstars individual developers. A security vulnerability exists in Books-Management-System version 1.0, which stems from a cross-site request forgery due to a misbehavior in file/api/article/del...

PHPGurukul COVID19 Testing Management System 注入漏洞

The PHPGurukul COVID19 Testing Management System is a new Crown Pneumonia Testing Management System from PHPGurukul, Inc. An injection vulnerability exists in version 1.0 of the PHPGurukul COVID19 Testing Management System, which stems from SQL injection due to the incorrect operation of the...

PHPGurukul COVID19 Testing Management System 注入漏洞

The PHPGurukul COVID19 Testing Management System is a new crown pneumonia testing management system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul COVID19 Testing Management System, which stems from SQL injection due to incorrect manipulation of the parameter...

CVE-2023-44755

Sacco Management system v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /sacco/ajax.php...

WordPress plugin Vasaio QR Code 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Code-Projects Online Class and Exam Scheduling System 安全漏洞

Code-Projects Online Class and Exam Scheduling System is an online class and exam scheduling system from Code-Projects open source. A security vulnerability exists in Code-Projects Online Class and Exam Scheduling System version 1.0, which is caused by SQL injection due to incorrect manipulation ...

Student Study Center Desk Management System 安全漏洞

Student Study Center Desk Management System is a student learning management system from the individual developer Carlo Montero. A security vulnerability exists in Student Study Center Desk Management System v1.0, which can be exploited to bypass authentication via a specially crafted GET request...