14 matches found
CVE-2026-15559: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler. Performing a manipulation of the argument appid results in sql injection. The attack is possible to be...
CVE-2024-10415
A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /file/accept.php. The manipulation of the argument reqid leads to sql injection. The attack can be initiated remotely. The exploit has...
CVE-2024-10415 code-projects Blood Bank Management System accept.php sql injection
A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /file/accept.php. The manipulation of the argument reqid leads to sql injection. The attack can be initiated remotely. The exploit has...
CVE-2024-10415 code-projects Blood Bank Management System accept.php sql injection
A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /file/accept.php. The manipulation of the argument reqid leads to sql injection. The attack can be initiated remotely. The exploit has...
CVE-2024-10409
A vulnerability was found in code-projects Blood Bank Management 1.0 and classified as critical. This issue affects some unknown processing of the file /file/accept.php. The manipulation of the argument reqid leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-10409 code-projects Blood Bank Management accept.php sql injection
A vulnerability was found in code-projects Blood Bank Management 1.0 and classified as critical. This issue affects some unknown processing of the file /file/accept.php. The manipulation of the argument reqid leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-10409 code-projects Blood Bank Management accept.php sql injection
A vulnerability was found in code-projects Blood Bank Management 1.0 and classified as critical. This issue affects some unknown processing of the file /file/accept.php. The manipulation of the argument reqid leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-10415: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /file/accept.php. The manipulation of the argument reqid leads to sql injection. The attack can be initiated remotely. The exploit has...
CVE-2024-10409: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Blood Bank Management 1.0 and classified as critical. This issue affects some unknown processing of the file /file/accept.php. The manipulation of the argument reqid leads to sql injection. The attack may be initiated remotely. The exploit has been...
Comus 2.0 Accept.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23661/info Comus is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying...
Comus Accept.PHP远程文件包含漏洞
Comus是一款基于PHP的WEB应用程序。 Comus不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Accept.PHP'脚本对用户提交的'DOCUMENTROOT'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Comus 2.0 目前没有解决方案提供： http://www.hotscripts.com/Detailed/32712.html http://www.example.com/accept.php?DOCUMENTROOT=http://shell...
CVE-2007-2287
CVE-2007-2287 is a PHP remote file inclusion vulnerability affecting the application: comus 2.0 Final. The issue occurs in accept.php where untrusted input in the DOCUMENT_ROOT parameter can lead to remote code execution. The documented impact is arbitrary PHP code execution by an attacker supply...
CVE-2007-2287: Undefined Security Weakness
PHP remote file inclusion vulnerability in accept.php in comus 2.0 Final allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter...
Comus 2.0 - 'Accept.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/23661/info Comus is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...