CVE-2024-10702

A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

WordPress Automatic Translation plugin <= 1.0.4 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Automatic Translation versions = 1.0.4...

CVE-2024-9515

A vulnerability was found in D-Link DIR-605L 2.13B01 BETA. It has been classified as critical. This affects the function formSetQoS of the file /goform/formSetQoS. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has be...

WordPress Include Fussball.de Widgets plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin Include Fussball.de Widgets versions = 4.0.0...

CVE-2024-9326

A vulnerability classified as critical was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /shopping/admin/index.php of the component Admin Panel. The manipulation of the argument username leads to sql injection. The attack can be initiated...

WordPress LWS Affiliation plugin <= 2.3.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Fariq Fadillah Gusti Insani Patchstack Alliance in WordPress Plugin LWS Affiliation versions = 2.3.4...

PT-2024-38489 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A problematic issue was found, affecting the save users function of the file admin/user/index.php. This leads to cross-site request forgery, which can be initiated...

CVE-2024-7460

OSWAPP Warehouse Inventory System 1.0/2.0 is affected by CVE-2024-7460 via the /change_password.php endpoint, where an undisclosed function misbehavior enables cross-site request forgery. The vulnerability can be triggered remotely and the exploit has been publicly disclosed. Multiple sources con...

CVE-2024-7280

A vulnerability was found in SourceCodester Lot Reservation Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/viewreserved.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-7273

A vulnerability classified as critical was found in itsourcecode Alton Management System 1.0. This vulnerability affects unknown code of the file search.php. The manipulation of the argument rcode leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2024-7216

A vulnerability was found in TOTOLINK LR1200 9.3.1cu.2832. It has been classified as problematic. This affects an unknown part of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. The complexity of an attack is rather high. The exploitability is told to be...

CVE-2024-6965 Tenda O3 fromVirtualSet stack-based overflow

A vulnerability has been found in Tenda O3 1.0.0.10 and classified as critical. Affected by this vulnerability is the function fromVirtualSet. The manipulation of the argument ip/localPort/publicPort/app leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has be...

WordPress Newspack Blocks plugin <= 3.0.8 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Newspack Blocks versions = 3.0.8...

CVE-2024-5114

The CVE-2024-5114 entry affects Campcodes Complete Web-Based School Management System 1.0, with a vulnerability in /view/teacher_attendance_history1.php where manipulation of the index parameter enables SQL injection. The flaw is exploitable remotely and has been disclosed publicly. Connected doc...

CVE-2024-5098

A vulnerability has been found in SourceCodester Simple Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to the public...

CVE-2024-4686

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /view/emarksrangegradeupdateform.php. The manipulation of the argument grade leads to cross site scripting. The attack m...

CVE-2024-4793

The CVE-2024-4793 entry corresponds to Campcodes Online Laundry Management System 1.0, where an SQL injection is triggered by manipulating the id parameter in /manage_laundry.php. Affected function/filename is unspecified beyond that file and vulnerability is remote-accessible. The exploit has be...

PT-2024-31488 · Campcodes · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A problematic issue has been found in the system, affecting some unknown functionality of the file /view/teacher attendance history1.php. The manipulation of the...

readallcomics.com Cross Site Scripting vulnerability OBB-3918782

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-3877 Tenda F1202 fromqossetting stack-based overflow

A vulnerability classified as critical was found in Tenda F1202 1.2.0.20408. Affected by this vulnerability is the function fromqossetting of the file /goform/fromqossetting. The manipulation of the argument qos leads to stack-based buffer overflow. The attack can be launched remotely. The exploi...