CVE-2024-10337

A vulnerability classified as critical has been found in SourceCodeHero Clothes Recommendation System 1.0. Affected is an unknown function of the file /admin/home.php?con=add. The manipulation of the argument cat/subcat/ t1/t2/text leads to sql injection. It is possible to launch the attack...

PT-2024-16198

Name of the Vulnerable Software and Affected Versions SourceCodeHero Clothes Recommendation System version 1.0 Description A critical issue was found in the system, affecting an unknown functionality of the file /admin/home.php. The manipulation of the view argument, specifically view1, leads to...

CVE-2024-10338: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/home.php. The manipulation of the argument view/view1 leads to sql injection. The attack can be launched remotely. Th...

CVE-2024-10337: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodeHero Clothes Recommendation System 1.0. Affected is an unknown function of the file /admin/home.php?con=add. The manipulation of the argument cat/subcat/ t1/t2/text leads to sql injection. It is possible to launch the attack...

PT-2021-23894

Name of the Vulnerable Software and Affected Versions: Projectworlds Hospital Management System version 1.0 Description: The issue concerns SQL injection vulnerability via multiple parameters in the admin home.php file. Recommendations: For Projectworlds Hospital Management System version 1.0,...

CVE-2008-7041: Improper Authentication

AJ Classifieds allows remote attackers to bypass authentication and gain administrator privileges via a direct request to admin/home.php...

CVE-2008-6912: Improper Authentication

Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin/home.php...

CVE-2008-6553: Improper Authentication

microcms-admin-home.php in Implied by Design Micro CMS Micro-CMS 3.5 aka 0.3.5 does not require authentication as an administrator, which allows remote attackers to 1 create administrative accounts via an addadmin action, 2 remove administrative accounts via a deleteadmin action, and 3 modify...

CVE-2008-5042

Zeeways PhotoVideoTube 1.1 and earlier contains an authentication bypass vulnerability that allows remote attackers to bypass login and perform administrative tasks via a direct request to admin/home.php. This CVE (CVE-2008-5042) is documented by NVD and CVE lists, with public exploit references ...

CVE-2008-5042: Improper Authentication

Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct request to admin/home.php...

CVE-2008-4585: Undefined Security Weakness

Belong Software Site Builder 0.1 beta allows remote attackers to bypass intended access restrictions and perform administrative actions via a direct request to admin/home.php...