CVE-2024-10415

A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /file/accept.php. The manipulation of the argument reqid leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2024-10415 code-projects Blood Bank Management System accept.php sql injection

A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /file/accept.php. The manipulation of the argument reqid leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2024-10415 code-projects Blood Bank Management System accept.php sql injection

A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /file/accept.php. The manipulation of the argument reqid leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2024-10409

A vulnerability was found in code-projects Blood Bank Management 1.0 and classified as critical. This issue affects some unknown processing of the file /file/accept.php. The manipulation of the argument reqid leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-10409 code-projects Blood Bank Management accept.php sql injection

A vulnerability was found in code-projects Blood Bank Management 1.0 and classified as critical. This issue affects some unknown processing of the file /file/accept.php. The manipulation of the argument reqid leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-10409 code-projects Blood Bank Management accept.php sql injection

A vulnerability was found in code-projects Blood Bank Management 1.0 and classified as critical. This issue affects some unknown processing of the file /file/accept.php. The manipulation of the argument reqid leads to sql injection. The attack may be initiated remotely. The exploit has been...

Comus 2.0 Accept.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23661/info Comus is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying...

Comus Accept.PHP远程文件包含漏洞

Comus是一款基于PHP的WEB应用程序。 Comus不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Accept.PHP'脚本对用户提交的'DOCUMENTROOT'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Comus 2.0 目前没有解决方案提供： http://www.hotscripts.com/Detailed/32712.html http://www.example.com/accept.php?DOCUMENTROOT=http://shell...

CVE-2007-2287

CVE-2007-2287 is a PHP remote file inclusion vulnerability affecting the application: comus 2.0 Final. The issue occurs in accept.php where untrusted input in the DOCUMENT_ROOT parameter can lead to remote code execution. The documented impact is arbitrary PHP code execution by an attacker supply...

Comus 2.0 - 'Accept.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/23661/info Comus is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...