CVE-2024-37848

SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to execute arbitrary code via the admindelete.php component...

CVE-2024-37848

SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to execute arbitrary code via the admindelete.php component...

CVE-2024-37848

SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to execute arbitrary code via the admindelete.php component...

CVE-2024-37848

A SQL Injection vulnerability exists in Online-Bookstore-Project-In-PHP v1.0 . The flaw is located within the admin_delete.php component, which allows a local attacker to achieve arbitrary code execution . To mitigate this risk, it is recommended to disable the admin_delete.php component until a ...

PT-2024-27782

Name of the Vulnerable Software and Affected Versions Online-Bookstore-Project-In-PHP version 1.0 Description The issue allows a local attacker to execute arbitrary code via the admin delete.php component. This is due to a SQL Injection vulnerability. Recommendations For...

Online Book Store Security Breach

Online Book Store is an online bookstore by the individual developer Arvin Arandilla. A security vulnerability exists in Online Book Store v1.0, which originates from a SQL injection vulnerability that allows local attackers to execute arbitrary code via the admindelete.php component...

CVE-2024-6013

A vulnerability was found in itsourcecode Online Book Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file admindelete.php. The manipulation of the argument bookisbn leads to sql injection. The attack may be initiated remotely. The exploit has been...

Online Book Store SQL Injection Vulnerability

Online Book Store is an online bookstore by the individual developer Arvin Arandilla. The SQL injection vulnerability exists in itsourcecode Online Book Store version 1.0, which stems from admindelete.php containing unknown processing that leads to SQL injection via the parameter bookisbn...

PT-2024-37316 · Unknown · Itsourcecode Online Bookstore

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Book Store version 1.0 Description: A critical issue affects the processing of the file admin delete.php. The manipulation of the bookisbn argument leads to SQL injection. The attack can be initiated remotely...

CVE-2024-3536

A vulnerability has been found in Campcodes Church Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/deletelog.php. The manipulation of the argument selector leads to sql injection. The attack can be initiated remotely. The exploit has be...

PT-2024-26459 · Unknown · Campcodes Church Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Church Management System version 1.0 Description: A critical issue has been found in the system, affecting the /admin/delete log.php file. The manipulation of the selector argument leads to SQL injection. This issue can be exploited...

CVE-2024-3259

A vulnerability was found in SourceCodester Internship Portal Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/deleteactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be initiated...

SQL Injection Vulnerability in the Internship Portal Management System

Internship Portal Management System is an internship portal management system by the individual developer ChatikoboL. A SQL injection vulnerability exists in Internship Portal Management System version 1.0, which is caused by a SQL injection vulnerability in the activityid parameter of the...

PT-2024-24711 · Unknown · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue has been discovered, affecting the file admin/delete activity.php. The manipulation of the activity id argument leads to SQL injection. This issue ca...

PT-2023-30873 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS versions 9.0.0 through 9.2.2 Description: The issue allows an attacker to force an admin user to delete server report logs on a web application to which they are currently authenticated via the API endpoint...

GHSA-765F-3MGX-24PW Cross-Site Request Forgery in JFinalCMS via /admin/friend_link/delete

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/friendlink/delete...

JFinalCMS Security Vulnerability

JFinalCMS is a content management system by heyewei individual developer. A security vulnerability exists in JFinalCMS v5.0.0, which originates from a cross-site request forgery vulnerability in the /admin/div/delete component...

CVE-2023-27052

E-Commerce System v1.0 ws discovered to contain a SQL injection vulnerability via the id parameter at /admin/deleteuser.php...

PT-2023-20917 · Unknown · E-Commerce System

Name of the Vulnerable Software and Affected Versions: E-Commerce System version 1.0 Description: A SQL injection issue was found in the E-Commerce System. The vulnerability can be exploited via the id parameter at the "/admin/delete user.php" API endpoint. Recommendations: For E-Commerce System...

Moosikay E-Commerce System SQL Injection Vulnerability

Moosikay E-Commerce System is an e-commerce system by the individual developer Arvin Arandilla. A security vulnerability exists in Moosikay E-Commerce System v1.0, which was discovered to contain an SQL injection vulnerability via the id parameter in /admin/deleteuser.php...