PT-2024-39363 · Unknown · Sourcecodester Best Online News Portal

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Online News Portal version 1.0 Description: A critical vulnerability was found in the Comment Section of the SourceCodester Best Online News Portal. The issue affects unknown code in the file /news-details.php. The...

Envoy 安全漏洞

Envoy is an Enphase open source gateway program for connecting smart home devices. A security vulnerability exists in Envoy version 1.31, which stems from a flaw in the HTTP/2 codec around stream management that can cause Envoy to crash...

PT-2024-39365 · Unknown · Code-Projects Crud Operation System

Name of the Vulnerable Software and Affected Versions: code-projects Crud Operation System version 1.0 Description: A critical issue was found in the code-projects Crud Operation System. The problem lies in an unknown function of the file updata.php, where the manipulation of the sid argument lea...

Sourcecodester Best House Rental Management System 安全漏洞

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester, Inc. A security vulnerability exists in Sourcecodester Best House Rental Management System version 1.0, which originates from an arbitrary file upload vulnerability in the savesettings...

PT-2024-39329 · Code Projects · Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Hospital Management System version 1.0 Description: A critical issue was found in the Hospital Management System, affecting an unknown part of the file check availability.php. The manipulation of the email argument leads to SQL...

Online Eyewear Shop 安全漏洞

Online Eyewear Shop is an online eyewear store by the individual developer Carlo Montero. A security vulnerability exists in Online Eyewear Shop version 1.0, which stems from an unknown part of the Cart Content Handler component, where the manipulation of the parameter cartid/id results in improp...

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. A security vulnerability exists in Kashipara Music Management System version v1.0 that stems from an access control error...

Shopkit 安全漏洞

Shopkit is an open source Kirby Cms version 2 integrated commerce solution by Sam Nabi, an individual developer in Canada. A security vulnerability exists in Shopkit version 1.0. An attacker exploited the vulnerability to add a negative number of items to the shopping cart via the qtd parameter i...

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. A security vulnerability exists in Kashipara Music Management System version v1.0 that stems from an access control error. An attacker can take over the administrator account by exploiting the vulnerability...

CVE-2024-44430

SQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker to execute arbitrary code and obtain sensitive information via a crafted payload to the kortexlite/control/registercase.php interface...

PT-2024-6050 · Microsoft · Windows 10 +1

Name of the Vulnerable Software and Affected Versions: Windows 10 version 1507 Description: The vulnerability is related to a servicing stack issue that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, version 1507. This means that an attacker could...

Tailoring Management System SQL注入漏洞

Tailoring Management System is itsourcecode open source a tailoring management system. A SQL injection vulnerability exists in Tailoring Management System version 1.0, which stems from the parameter title in the file /inccatadd.php that can lead to SQL injection...

PT-2024-39096 · Sourcecodester · Sourcecodester Online Food Menu

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Menu version 1.0 Description: A critical issue has been found in the processing of the file /endpoint/delete-menu.php. The manipulation of the argument menu leads to SQL injection. The attack may be initiated...

CVE-2024-44837

A cross-site scripting XSS vulnerability in the component \bean\Manager.java of Drug v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user parameter...

drug 安全漏洞

drug is a drugstore sales management system from the individual developer deathbreak. A security vulnerability exists in drug version 1.0, which stems from a cross-site scripting XSS vulnerability in the component eanManager.java, which allows an attacker to execute arbitrary web script or HTML b...

Sourcecodester Simple Forum Website 安全漏洞

SourceCodester Simple Forum Website is a simple forum website from SourceCodester, Inc. A security vulnerability exists in Sourcecodester Simple Forum Website v1.0, which originates from a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...

PHPGurukul Job Portal SQL注入漏洞

PHPGurukul Job Portal is a PHP-based job search website system from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul Job Portal version 1.0, which originates from the id parameter in /jobportal/admin/employee/index.php...

itsourcecode Alton Management System 安全漏洞

itsourcecode Alton Management System is an online restaurant management system from itsourcecode open source. A security vulnerability exists in version 1.0 of itsourcecode Alton Management System, which stems from vulnerability to SQL injection via the menu parameter in file /noncombosave.php...

PHPGurukul Job Portal SQL注入漏洞

PHPGurukul Job Portal is a PHP-based job search website system from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul Job Portal version 1.0, which originates from the search parameter in /jobportal/index.php...

PHPGurukul Job Portal 代码问题漏洞

PHPGurukul Job Portal is a PHP-based job search website system from PHPGurukul Inc. A code issue vulnerability exists in PHPGurukul Job Portal version 1.0, which stems from the inclusion of an unrestricted file upload vulnerability. An attacker can exploit this vulnerability to conduct remote cod...