CVE-2024-34226

SQL injection vulnerability in /php-sqlite-vms/?page=managevisitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters...

PT-2024-25756 · Sourcecodester · Sourcecodester Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Visitor Management System version 1.0 Description: The issue allows attackers to execute arbitrary SQL commands, potentially leading to data exfiltration. This can be exploited remotely via the id parameter in the...

CVE-2024-22983

SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in the myform.php endpoint...

CVE-2024-22983

SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in the myform.php endpoint...

CVE-2024-22983

SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in the myform.php endpoint...

CVE-2024-22983

The CVE-2024-22983 entry describes a SQL injection vulnerability in Projectworlds Visitor Management System v1.0 (PHP). The flaw allows a remote attacker to escalate privileges via the name parameter in the myform.php endpoint. Red Hat, NVD, CNNVD, CVE records corroborate the vulnerability detail...

Projectworlds Visitor Management System SQL Injection Vulnerability

Projectworlds Visitor Management System is a visitor access management system. It implements self-service functionality for visitors. A SQL injection vulnerability exists in Projectworlds Visitor Management System v.1.0 that could allow a remote attacker to escalate privileges via the name...

CVE-2024-22922

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php...

CVE-2024-22922

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php...

CVE-2024-22922

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php...

Vistor Management System Security Vulnerability

Vistor Management System is a visitor management system. A security vulnerability exists in Projectworlds Vistor Management System version v.1.0, which stems from a vulnerability that allows a remote attacker to escalate privileges via a crafted script...

PT-2024-19615

Name of the Vulnerable Software and Affected Versions Projectworlds Vistor Management Systemin PHP version 1.0 Description An issue in the system allows a remote attacker to escalate privileges via a crafted script to the login page in the POST/index.php. Recommendations For version 1.0, consider...

Company Visitor Management System search-visitor.php File SQL Injection Vulnerability

Company Visitor Management System is a visitor management system. Company Visitor Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the file search-visitor.php. An attacker can exploit this vulnerability to...

CVE-2024-0652

A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file search-visitor.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit ha...

CVE-2024-0652

A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file search-visitor.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit ha...

CVE-2024-0651

A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file search-visitor.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has...

CVE-2024-0651

A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file search-visitor.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has...

Sql injection

A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file search-visitor.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has...

Cross site scripting

A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file search-visitor.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit ha...

CVE-2024-0652

The CVE-2024-0652 entry concerns PHPGurukul’s Company Visitor Management System 1.0 and a vulnerability in the file search-visitor.php that allows cross-site scripting. The issue is triggered by insufficient input filtering/escaping, with remote exploitation and a publicly disclosed exploit. Affe...