Campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in Complete Web-Based School Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary SQL commands via the name...

Campcodes Complete Web-Based School Management System SQL注入漏洞

Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. An SQL injection vulnerability exists in the Complete Web-Based School Management System version 1.0, which stems from an incorrect operation of the parameter index that can lead to...

PT-2024-26253 · Campcodes · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A SQL injection issue allows an attacker to execute arbitrary SQL commands via the month parameter in the "/model/all events1.php" API endpoint. Recommendations: F...

Campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in Complete Web-Based School Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary SQL commands via the...

CVE-2024-35558

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/cadeal.php?mudi=rev&nohrefStr=close...

CVE-2024-35556

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsSysdeal.php?mudi=infoSet...

CVE-2024-35553

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infoMovedeal.php?mudi=add&nohrefStr=close...

CVE-2024-35557

idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/vpsApideal.php?mudi=rev&nohrefStr=close...

QEMU: virtio-net: stack buffer overflow in virtio_net_flush_tx()

A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtionetflushtx function if guest features VIRTIONETFHASHREPORT, VIRTIOFVERSION1 and VIRTIONETFMRGRXBUF are enabled. This could allow a malicious user to overwrite local variables...

idccms 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology, Inc. A security vulnerability exists in idccms v1.35, which was discovered via the component...

PT-2024-35191 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /view/teacher salary invoice.php. The manipulation of the teacher id...

idccms 安全漏洞

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology, Inc. A security vulnerability exists in idccms v1.35, which was discovered via the component /admin/cadeal.php?mudi=rev&nohrefStr=close and contai...

CVE-2024-34952

taurusxin ncmdump v1.3.2 was discovered to contain a segmentation violation via the NeteaseCrypt::FixMetadata function at /src/ncmcrypt.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted .ncm file...

Event Registration System SQL注入漏洞

Event Registration System is a QR code based event registration system by Carlo Montero, a personal developer. An SQL injection vulnerability exists in Event Registration System version 1.0, which is caused by the presence of an unknown function in /registrar/ that leads to SQL injection via the...

Event Registration System SQL注入漏洞

Event Registration System is a QR code based event registration system by Carlo Montero, an individual developer. An SQL injection vulnerability exists in Event Registration System version 1.0, which originates from an unknown function in Portal.php that causes SQL injection via the...

PT-2024-34536 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /view/teacher attendance history1.php. The manipulation of the index...

Electricity Consumption Monitoring Tool SQL注入漏洞

Electricity Consumption Monitoring Tool is an electricity consumption monitoring tool by rems individual developer. A SQL injection vulnerability exists in Electricity Consumption Monitoring Tool version 1.0, which originates from an unknown function in /endpoint/delete-bill.php that causes SQL...

PT-2024-34524 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /view/student payment invoice1.php. The manipulation of the date argument lead...

PT-2024-34557 · Sourcecodester · Sourcecodester Event Registration System

Name of the Vulnerable Software and Affected Versions: SourceCodester Event Registration System version 1.0 Description: A critical issue affects the processing of the file /classes/Master.php?f=load registration, where the manipulation of the argument last id/event id leads to sql injection. The...

Directory Management System 跨站脚本漏洞

Directory Management System is a directory management system by the individual developer Anuj Kumar. A cross-site scripting vulnerability exists in Directory Management System version 1.0, which stems from an unknown function in /admin/search-directory.php that results in cross-site scripting...