PT-2023-17373 · Sourcecodester · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue affects the processing of the file /classes/Master.php?f=delete category, where the manipulation of the id argument leads to sql injection. The attack c...

PT-2023-17365 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue has been found in the Product Search component, specifically affecting the file /?p=products. The search argument is vulnerable to sql injection, allowi...

PT-2023-17362 · Unknown · Phpgurukul Bp Monitoring Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul BP Monitoring Management System version 1.0 Description: A critical issue was found in the Change Password Handler component, specifically in the file change-password.php. The manipulation of the password argument leads to SQL...

PT-2023-17366 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue has been found in the software, affecting the /admin/sales/index.php file. The manipulation of the date start and date end arguments leads to SQL...

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

BP Monitoring Management System SQL注入漏洞

BP Monitoring Management System is a web-based application by the individual developer of phpgurukul. A SQL injection vulnerability exists in HPGurukul BP Monitoring Management System version 1.0. The vulnerability stems from a SQL injection vulnerability in the name/mobno parameter...

PT-2023-17356 · Sourcecodester · Sourcecodester Simple/Beautiful Shopping Cart System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple and Beautiful Shopping Cart System version 1.0 Description: A critical issue was found in the delete user query.php file, where the manipulation of the user id argument leads to SQL injection. The attack can be initiated...

Simple and Beautiful Shopping Cart System SQL注入漏洞

Simple and Beautiful Shopping Cart System is an e-commerce platform. A SQL injection vulnerability exists in SourceCodester Simple and Beautiful Shopping Cart System version 1.0, which stems from a problem in the file login.php, where manipulation of the parameters username/password can lead to s...

CVE-2020-36072

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the id parameter...

PT-2023-11801 · Unknown · Tailoring Management System

Name of the Vulnerable Software and Affected Versions: Tailor Management System version 1 Description: A SQL injection issue allows a remote authenticated attacker to execute arbitrary code via the customer parameter of the "email.php" page. This enables the attacker to potentially access and...

Simple Guestbook Management System 跨站脚本漏洞

Simple Guestbook Management System is a guestbook management system. A security vulnerability exists in Simple Guestbook Management System version 1.0. An attacker could exploit this vulnerability to conduct a cross-site scripting attack...

PT-2023-20827 · Unknown · Dynamic Transaction Queuing System

Name of the Vulnerable Software and Affected Versions: Dynamic Transaction Queuing System version 1.0 Description: The issue concerns an arbitrary file upload vulnerability. It affects the "/admin/ajax.php?action=save uploads" API endpoint, allowing attackers to execute arbitrary code via a craft...

Air Cargo Management System SQL注入漏洞

Air Cargo Management System is an air cargo management system. A SQL injection vulnerability exists in SourceCodester Air Cargo Management System version 1.0, which is caused by incorrect manipulation of the parameter id resulting in sql injection...

PT-2023-8807

Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.21 Description: The issue is related to the improper handling of backticks as Javascript string delimiters in templates, which can lead to the injection of arbitrary Javascript code into the Go template. This occurs whe...

PT-2023-17249 · Sourcecodester · Sourcecodester Simple Task Allocation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Task Allocation System version 1.0 Description: A critical issue has been found in the manage user.php file, where the manipulation of the id argument leads to sql injection. This issue can be exploited remotely. The...

SourceCodester Police Crime Record Management System 跨站脚本漏洞

Police Crime Record Management System is a Police Crime Record Management System by Osman Yahaya Individual Developer. A security vulnerability exists in SourceCodester Police Crime Record Management System version 1.0 due to unknown code in the file /admin/casedetails.php of the component GET...

PT-2023-14807 · Xman · Xman

Name of the Vulnerable Software and Affected Versions: X-Man version 1.0 Description: The issue is related to a SQL injection vulnerability, which can cause data leakage. Recommendations: For X-Man version 1.0, consider applying a patch or fix to resolve the SQL injection vulnerability. As a...

PT-2023-17203 · Sourcecodester · Sourcecodester Young Entrepreneur E-Negosyo System

Name of the Vulnerable Software and Affected Versions: SourceCodester Young Entrepreneur E-Negosyo System version 1.0 Description: A critical issue has been found in the system, affecting the file index.php?q=product. The manipulation of the search argument leads to SQL injection. The attack can ...

Young Entrepreneur E-Negosyo System SQL注入漏洞

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in SourceCodester Young Entrepreneur E-Negosyo System version 1.0, which stems from an incorrect manipulation of the parameter phonenumber resulting in sq...

Young Entrepreneur E-Negosyo System SQL注入漏洞

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in SourceCodester Young Entrepreneur E-Negosyo System version 1.0, which stems from an incorrect manipulation of the parameter search resulting in sql...