Simple Online Mens Salon Management System SQL Injection Vulnerability

Simple Online Mens Salon Management System is an open source men's salon management system. SourceCodester Simple Online Mens Salon Management System version 1.0 suffers from a SQL injection vulnerability that stems from a parameter id in the file viewservice.php that can lead to SQL injection...

PT-2024-34390 · Unknown · Sourcecodester Simple Online Mens Salon Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Mens Salon Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file view service.php. The manipulation of the id argument leads to...

CVE-2024-4609

A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in...

CVE-2024-4609

A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in...

CVE-2024-4609 Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability

A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in...

CVE-2024-4609

CVE-2024-4609 affects Rockwell Automation FactoryTalk View SE Datalog function. The vulnerability allows SQL injection when the SQL database has no authentication or legitimate credentials are stolen, potentially exposing sensitive information and allowing modification/deletion of remote database...

CVE-2024-4609 Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability

A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in...

Rockwell Automation FactoryTalk View SE

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : FactoryTalk View SE Vulnerability : Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...

CVE-2024-4945

A vulnerability was found in SourceCodester Best Courier Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file viewparcel.php. The manipulation of the argument id leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2024-4930

A vulnerability classified as critical was found in SourceCodester Simple Online Bidding System 1.0. This vulnerability affects unknown code of the file /simple-online-bidding-system/index.php?page=viewprod. The manipulation of the argument id leads to sql injection. The attack can be initiated...

Rockwell Automation FactoryTalk View SE security vulnerabilities

Rockwell Automation FactoryTalk View SE is an industrial automation system view interface from Rockwell Automation. Rockwell Automation FactoryTalk View SE suffers from a SQL injection vulnerability that can be exploited by an attacker to view, add, modify, or delete information in a back-end...

PT-2024-3630 · Rockwell Automation · Factorytalk View Se

Name of the Vulnerable Software and Affected Versions: Rockwell Automation FactoryTalk View SE Datalog function Description: A threat actor could inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. This could result in...

PT-2024-33536 · Sourcecodester · Sourcecodester Best Courier Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Courier Management System version 1.0 Description: A problematic issue has been found, affecting an unknown function of the file view parcel.php. The manipulation of the id argument leads to unrestricted upload. This issue...

CVE-2024-4609: Improper Input Validation

A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in...

PT-2024-33440 · Sourcecodester · Sourcecodester Simple Online Bidding System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Bidding System version 1.0 Description: A critical issue was found in the software, affecting the file /simple-online-bidding-system/index.php?page=view prod. The manipulation of the id argument leads to SQL...

CVE-2024-4910

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/studentexammarkinsertform1.php. The manipulation of the argument grade leads to sql injection. The...

CVE-2024-4905

A vulnerability classified as critical has been found in Kashipara College Management System 1.0. Affected is an unknown function of the file viewstudentseachdetail.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-4905

CVE-2024-4905 affects Kashipara College Management System 1.0. The vulnerability resides in an unknown function of the file view_students_each_detail.php where manipulation of the id argument enables SQL injection. Exploitation is described as remote and publicly disclosed, with VDB-264438 as the...

College Management System SQL Injection Vulnerability

College Management System is a simple project organized by Code Projects. It is used to keep track of students, teachers, subjects, schedules and all things related to college. College Management System version 1.0 has a SQL injection vulnerability that stems from a SQL injection vulnerability in...

CVE-2024-4908: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/studentattendancehistory1.php. The manipulation of the argument index leads to sql injection. The attack may be initiated...