PT-2024-15444 · Unknown · Kashipara Food Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Food Management System version 1.0 Description: A vulnerability was found in the processing of the file party submit.php, where the manipulation of the party address argument leads to cross-site scripting. The attack may be initiate...

DEBIAN-CVE-2023-51441

UNSUPPORTED WHEN ASSIGNED Improper Input Validation vulnerability in Apache Axis allowed users with access to the admin service to perform possible SSRF This issue affects Apache Axis: through 1.3. As Axis 1 has been EOL we recommend you migrate to a different SOAP engine, such as Apache Axis...

PT-2024-15422 · Unknown · Online Job Portal

Name of the Vulnerable Software and Affected Versions: Online Job Portal version 1.0 Description: A problematic issue was found in the Create News Page component, specifically in the /Admin/News.php file. The manipulation of the News argument with malicious input, such as alert0x00C57D, leads to...

PT-2024-15425 · Sourcecodester · Sourcecodester Clinic Queuing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinic Queuing System version 1.0 Description: A critical issue affects the processing of the file /index.php, specifically the component GET Parameter Handler. The manipulation of the page argument leads to file inclusion. Thi...

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system from the individual developer Carlo Montero. A SQL injection vulnerability exists in CodeAstro Online Food Ordering System version 1.0, which originates when /admin/ in the component Admin Panel contains unknown code that causes SQL...

CVE-2023-50866

Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginAction.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-49633

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'buyeraddress' parameter of the buyerdetailsubmit.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-49658

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'bankdetails' parameter of the partysubmit.php resource does not validate the characters received and they are sent unfiltered to the database...

Online Notice Board System SQL Injection Vulnerability

Online Notice Board System is an online bulletin board system. A SQL injection vulnerability exists in the v1.0 version of Online Notice Board System, which occurs when the dd parameter of the user/updateprofile.php page is processed without filtering the data and sending it to the database for...

PT-2024-13964 · Unknown · Online Notice Board System

Name of the Vulnerable Software and Affected Versions: Online Notice Board System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the dd parameter of the "registration.php" resource does not validate the characters received, and th...

Travel Website SQL Injection Vulnerability

Travel Website is a PHP-based travel website. A SQL injection vulnerability exists in Travel Website v1.0, which occurs when the username parameter of the signupAction.php page is processed without filtering before sending the data to the database for processing...

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in the v1.0 version of Kashipara Billing Software, which originates when the custmerdetails parameter of the submitmateriallist.php page is processed without filtering the data and sending it t...

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in Kashipara Billing Software v1.0, which originates when the itemnameid parameter of the materialbill.php?action=itemRelation page is processed without filtering the data and sent to the...

PT-2024-13774 · Billing · Billing

Name of the Vulnerable Software and Affected Versions: Billing Software version 1.0 Description: The issue is related to multiple Unauthenticated SQL Injection vulnerabilities. The customer details parameter of the "buyer invoice submit.php" resource does not validate the characters received, and...

Travel Website SQL Injection Vulnerability

Travel Website is a PHP-based travel website. A SQL injection vulnerability exists in Travel Website v1.0, which occurs when the hotelIDHidden parameter on the generateReceipt.php page is processed without filtering the data and sent to the database for processing...

PT-2024-13982 · Unknown · Travel Website

Name of the Vulnerable Software and Affected Versions: Travel Website version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the city parameter of the "hotelSearch.php" resource does not validate the characters received, and they are sent...

Online Notice Board System SQL Injection Vulnerability

Online Notice Board System is an online bulletin board system. A SQL injection vulnerability exists in Online Notice Board System v1.0, which occurs when the dd parameter of the registration.php page is processed without filtering and sent to the database for processing...

SUSE CVE-2023-6693

A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtionetflushtx function if guest features VIRTIONETFHASHREPORT, VIRTIOFVERSION1 and VIRTIONETFMRGRXBUF are enabled. This could allow a malicious user to overwrite local variables...

DEBIAN-CVE-2023-6693

A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtionetflushtx function if guest features VIRTIONETFHASHREPORT, VIRTIOFVERSION1 and VIRTIONETFMRGRXBUF are enabled. This could allow a malicious user to overwrite local variables...

RRJ Nueva Ecija Engineer Online Portal Security Vulnerability

RRJ Nueva Ecija Engineer Online Portal is an online portal for engineers from RRJ Nueva Ecija. A security vulnerability exists in RRJ Nueva Ecija Engineer Online Portal version 1.0, which originates in the file /admin/uploads/ can lead to the exposure of file and directory information...