Campcodes Online Job Finder System SQL Injection Vulnerability

Campcodes Online Job Finder System is an online job finder system from Campcodes, Inc. A SQL injection vulnerability exists in version 1.0 of the Campcodes Online Job Finder System, which originates from a SQL injection vulnerability in the UESRID parameter of the /admin/user/controller.php file...

PT-2024-21466 · Unknown · Campcodes Online Job Finder System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Job Finder System version 1.0 Description: A critical issue affects the processing of the file /admin/employee/controller.php of the component GET Parameter Handler. The manipulation of the EMPLOYEEID argument leads to SQL...

PT-2024-21483 · Unknown · Campcodes Online Job Finder System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Job Finder System version 1.0 Description: A critical vulnerability was found in the Campcodes Online Job Finder System. The issue affects an unknown functionality of the file /admin/user/index.php. The manipulation of the id...

Employee Task Management System SQL Injection Vulnerability

Employee Task Management System is an Employee Task Management System by Carlo Montero Personal Developer. An SQL injection vulnerability exists in Employee Task Management System version 1.0, which stems from an incorrect operation of the parameter adminid that can result in an sql injection...

PT-2024-21133 · Sourcecodester · Sourcecodester Employee Task Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Task Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Employee Task Management System. This issue affects the file /update-employee.php and is related to the...

Employee Task Management System SQL Injection Vulnerability

Employee Task Management System is an Employee Task Management System by Carlo Montero Personal Developer. An SQL injection vulnerability exists in Employee Task Management System version 1.0, which stems from an incorrect manipulation of the parameter userid that can result in an sql injection...

PT-2024-20801 · Unknown · Magesh-K21 Online-College-Event-Hall-Reservation-System

Name of the Vulnerable Software and Affected Versions: MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0 Description: A vulnerability was found in the processing of the file book history.php, where the manipulation of the id argument leads to cross-site scripting. The attack may...

PT-2024-20991 · Sourcecodester · Sourcecodester Product Review Rating System

Name of the Vulnerable Software and Affected Versions: SourceCodester Product Review Rating System version 1.0 Description: A problematic issue was found in the Rate Product Handler component. The manipulation of the Your Name/Comment argument leads to cross-site scripting. It is possible to laun...

PT-2024-20998 · Sourcecodester · Sourcecodester Employee Task Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Task Management System version 1.0 Description: A critical issue was found in the SourceCodester Employee Task Management System, affecting some unknown functionality of the file update-admin.php. The manipulation of t...

DEBIAN-CVE-2024-2193

A Speculative Race Condition SRC vulnerability that impacts modern CPU architectures supporting speculative execution related to Spectre V1 has been disclosed. An unauthenticated attacker can exploit this vulnerability to disclose arbitrary data from the CPU using race conditions to access the...

PT-2024-19658 · WordPress · Elementinvader Addons For Elementor

Name of the Vulnerable Software and Affected Versions: ElementInvader Addons for Elementor plugin for WordPress versions up to, and including, 1.2.2 Description: The issue is related to Stored Cross-Site Scripting via the button link in the EliSlider. This is due to insufficient input sanitizatio...

PT-2024-20596 · Unknown · Surya2Developer Hostel Management Service

Name of the Vulnerable Software and Affected Versions: Surya2Developer Hostel Management Service version 1.0 Description: A problematic issue has been found in the Password Change Handler component, specifically affecting the /change-password.php file. The manipulation of the oldpassword argument...

CVE-2023-41505

An arbitrary file upload vulnerability in the Add Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

Computer Science Time Table System Security Vulnerability

Computer Science Time Table System is a computer science time table system. A security vulnerability exists in Code-projects Computer Science Time Table System version 1.0, which stems from an SQL injection vulnerability. The vulnerability can be exploited to run arbitrary code via...

PT-2024-20846 · Unknown · Agro-School Management System

Name of the Vulnerable Software and Affected Versions: Agro-School Management System version 1.0 Description: The issue allows attackers to run arbitrary code via the Login page. This is due to a SQL Injection vulnerability. Recommendations: For Agro-School Management System version 1.0, consider...

Exam Form Submission Cross-Site Scripting Vulnerability

Code-Projects Exam Form Submission is an open source exam form from Code-Projects. A cross-site scripting vulnerability exists in Exam Form Submission version 1.0 that originates from allowing an attacker to execute arbitrary code via Subject Name and Subject Code...

SourceCodester My Food Recipe Cross-Site Scripting Vulnerability

SourceCodester My Food Recipe is a recipe sharing web application. A cross-site scripting vulnerability exists in SourceCodester My Food Recipe version v.1.0, which originates from a vulnerability that allows a local attacker to execute arbitrary code via the Recipe Name, Procedure, ingredients...

PT-2024-21166 · Sourcecodester · Sourcecodester Insurance Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Insurance Management System version 1.0 Description: A Cross Site Scripting XSS issue allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket. This enables attackers to...

PT-2024-2648 · Egindemirbilek · Northstar C2

Name of the Vulnerable Software and Affected Versions: EginDemirbilek NorthStar C2 version 1 Description: The issue allows a remote attacker to execute arbitrary code via the login.php component due to a Cross Site Scripting vulnerability. This vulnerability exists because of the lack of protecti...

Secret-Coder-PHP-Project Security Vulnerability

Secret-Coder-PHP-Project is a PHP-based project. A security vulnerability exists in version 1.0 of Secret-Coder-PHP-Project that stems from the inclusion of sensitive information in the code...