32 matches found
CVE-2024-3350
A vulnerability, which was classified as critical, has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected by this issue is some unknown functionality of the file admin/modroom/index.php. The manipulation of the argument id leads to sql injection. The attack m...
CVE-2024-3351
A vulnerability, which was classified as critical, was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. This affects an unknown part of the file admin/modroomtype/index.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...
PT-2024-25293 · Sourcecodester · Sourcecodester Aplaya Beach Resort Online Reservation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Aplaya Beach Resort Online Reservation System version 1.0 Description: A critical issue has been discovered, affecting the file admin/mod comments/index.php. The manipulation of the id argument leads to SQL injection. This issu...
PT-2024-25281 · Sourcecodester · Aplaya Beach Resort Online Reservation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Aplaya Beach Resort Online Reservation System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file admin/mod room/index.php. The manipulation of the id argumen...
PT-2024-25300 · Sourcecodester · Sourcecodester Aplaya Beach Resort Online Reservation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Aplaya Beach Resort Online Reservation System version 1.0 Description: A critical issue affects the processing of the file admin/mod reports/index.php, where the manipulation of the argument categ/end leads to SQL injection. Th...
Aplaya Beach Resort Online Reservation System SQL注入漏洞
Aplaya Beach Resort Online Reservation System is the online room reservation system of Aplaya Beach Resort. SourceCodester Aplaya Beach Resort Online Reservation System version 1.0 has a SQL injection vulnerability that originates from a SQL injection in the id parameter of the...
PT-2024-14058 · Trendnet · Trendnet Ac1200 Tew-821Dap
Name of the Vulnerable Software and Affected Versions: TRENDnet Trendnet AC1200 TEW-821DAP version 3.00b06 Description: The issue allows an attacker to execute arbitrary code via the adm mod pwd action, which is a buffer overflow vulnerability. This vulnerability can be exploited to gain...
balerocms-src 代码问题漏洞
balerocms-src is the source code for Balero CMS. A security vulnerability exists in balerocms-src version 0.8.3, which originates from a vulnerability that allows remote attackers to run arbitrary code via a rich text editor on the /admin/main/mod-blog page...
PT-2023-12257 · Unknown · Balerocms-Src
Name of the Vulnerable Software and Affected Versions: balerocms-src version 0.8.3 Description: The issue allows remote attackers to run arbitrary code via a rich text editor on the "/admin/main/mod-blog" page. This is a result of a File Upload vulnerability. Recommendations: For balerocms-src...
CVE-2022-24601
Luocms v2.0 is affected by SQL Injection in /admin/manager/adminmod.php. An attacker can obtain sensitive information through SQL injection statements...
DuoDuoReturn.com System V8.3_UTF8 official version admin\mod\ad\list.act.php has SQL injection vulnerability
DuoDuo rebate system is for e-commerce rebate, shopping guide to provide solutions, is the open source PHP rebate site system. DuoDuo rebate network system V8.3UTF8 official version admin\mod\ad\list.act.php SQL injection vulnerability. The vulnerability is due to the system's failure to...
DuoDuoRebate V8.3_UTF8 official version admin_mod_goods_list.act.php has SQL injection vulnerability
DuoDuo rebate for e-commerce rebate, shopping guide to provide solutions, is the open source PHP rebate site system. DuoDuoRebate V8.3UTF8 official version adminmodgoodslist.act.php SQL injection vulnerability exists, the vulnerability is due to the system fails to effectively filter the content ...