OnCell G3150A-LTE Security Vulnerability

Moxa OnCell G3150A-LTE is a reliable and secure LTE gateway from Moxa China. A security vulnerability exists in OnCell G3150A-LTE v1.3 and earlier versions, which stems from the lack of protection of sensitive information during transmission, and an attacker may be able to obtain sensitive...

Online College Library System SQL Injection Vulnerability

Online College Library System is an online college library system. A SQL injection vulnerability exists in Online College Library System version 1.0, which originates from a security issue in the /admin/bookadd.php page...

Online College Library System Security Breach

Online College Library System is an online college library system. A security vulnerability exists in version 1.0 of the Online College Library System, which stems from a security issue in the /admin/categoryrow.php page...

QR Code Generator Cross-Site Scripting Vulnerability

QR Code Generator is a QR code generator website. A cross-site scripting vulnerability exists in code-projects QR Code Generator version 1.0, which stems from the parameter file in the file /download.php?file=author.png that causes cross-site scripting...

Engineers Online Portal Cross-Site Scripting Vulnerability

Engineers Online Portal is open source an online portal . It is developed using PHP, MySQL database, HTML, CSS, Javascript, jQuery, Ajax, Bootstrap and some other libraries. A cross-site scripting vulnerability exists in SourceCodester Engineers Online Portal version 1.0, which stems from the...

Customer Support System Security Breach

Customer Support System is a customer support system by oretnom23 Individual Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. A security vulnerability exists in Customer Support System version 1.0, which stems fr...

Inventory Management System SQL Injection Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which originates from a security issue in the /ample/app/action/editproduct.php page...

Client Details System Cross-Site Scripting Vulnerability

Client Details System is a management platform. A cross-site scripting vulnerability exists in code-projects Client Details System version 1.0, which stems from the parameter fname/lname/email/contact in the file /admin/regester.php that causes cross-site scripting...

PT-2023-8288 · Sourcecodester · Sourcecodester Free/Open Source Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Free and Open Source Inventory Management System version 1.0 Description: The issue is related to the lack of protection against SQL query structure exploitation in the /ample/app/action/edit product.php file of the Free and Op...

PT-2023-32902 · Unknown · Code-Projects Client Details System

Name of the Vulnerable Software and Affected Versions: code-projects Client Details System version 1.0 Description: A vulnerability was found in the code-projects Client Details System, classified as problematic. It affects an unknown function of the file /admin/update-clients.php. The manipulati...

PT-2023-32886 · Unknown · Code-Projects E-Commerce Website

Name of the Vulnerable Software and Affected Versions: code-projects E-Commerce Site version 1.0 Description: A problematic issue was found in the code-projects E-Commerce Site, affecting an unknown function of the file search.php. The manipulation of the keyword argument with the input leads to...

PT-2023-32875 · Unknown · Code-Projects E-Commerce Website

Name of the Vulnerable Software and Affected Versions: code-projects E-Commerce Website version 1.0 Description: A critical issue was found in the code-projects E-Commerce Website, affecting an unknown function of the file index search.php. The manipulation of the search argument leads to SQL...

Faculty Management System SQL Injection Vulnerability

Faculty Management System is a code-projects open source faculty management system . Faculty Management System version 1.0 SQL injection vulnerability , the vulnerability stems from /admin/php/crud.php in the presence of an unknown function , through the parameter fieldname lead to SQL injection...

PT-2023-32877 · Unknown · Code-Projects E-Commerce Website

Name of the Vulnerable Software and Affected Versions: code-projects E-Commerce Website version 1.0 Description: A critical issue affects some unknown functionality of the file user signup.php. The manipulation of the firstname, middlename, email, address, contact, or username arguments leads to...

CVE-2023-7075

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /main/checkout.php. The manipulation of the argument pt leads to cross site scripting. The attack may be...

PHPGurukul Online Notes Sharing System Code Issue Vulnerability

PHPGurukul Online Notes Sharing System is an online notes sharing system from PHPGurukul Inc. A code issue vulnerability exists in version 1.0 of the PHPGurukul Online Notes Sharing System that stems from allowing unrestricted uploads of any file...

MP3Gain Security Breach

MP3Gain is an audio volume control application. A security vulnerability exists in MP3Gain v1.6.2, which originated from allowing an attacker to cause a denial of service via the WriteMP3GainAPETag function...

PHPGurukul Online Notes Sharing System Security Vulnerability

PHPGurukul Online Notes Sharing System is an online notes sharing system from PHPGurukul Inc. A security vulnerability exists in version 1.0 of the PHPGurukul Online Notes Sharing System, which originates from a cross-site scripting XSS vulnerability in the file user/profile.php...

PT-2023-31292 · Unknown · Job Portal

Name of the Vulnerable Software and Affected Versions: Job Portal version 1.0 Description: The issue concerns unauthenticated SQL Injection vulnerabilities. Specifically, the txtDesc parameter of the "Employer/InsertWalkin.php" resource does not validate the characters received, sending them...

PT-2023-31291 · Unknown · Job Portal

Name of the Vulnerable Software and Affected Versions: Job Portal version 1.0 Description: The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the txtDate parameter of the "Employer/InsertWalkin.php" resource does not validate the characters received, and they are sen...