Sql injection

A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/pages/editchicken.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-0485: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Fighting Cock Information System 1.0. Affected is an unknown function of the file admin/pages/tables/addcon.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...

PT-2024-15602

Name of the Vulnerable Software and Affected Versions Fighting Cock Information System version 1.0 Description A critical issue was found in the Fighting Cock Information System, affecting an unknown function of the file admin/pages/tables/add con.php. The manipulation of the id argument leads to...

CVE-2024-0478: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/pages/editchicken.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

Fighting Cock Information System SQL Injection Vulnerability

Fighting Cock Information System is a chicken information system by chrisjelo individual developer. code-projects Fighting Cock Information System version 1.0 has a SQL injection vulnerability that originates from a SQL injection vulnerability in the file /admin/pages/editchicken.php...

CVE-2024-0460: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/pages/student-print.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

Faculty Management System SQL Injection Vulnerability

Faculty Management System is a code-projects open source faculty management system. code-projects Faculty Management System version 1.0 SQL injection vulnerability , the vulnerability stems from /admin/pages/student-print.php file has a SQL injection vulnerability...

CVE-2023-50175

Stored cross-site scripting vulnerability exists in the App Settings /admin/app page, the Markdown Settings /admin/markdown page, and the Customize /admin/customize page of GROWI versions prior to v6.0.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser o...

CVE-2023-7057

A vulnerability, which was classified as problematic, has been found in code-projects Faculty Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/pages/yearlevel.php. The manipulation of the argument Year Level/Section leads to cross site scripting. The...

Faculty Management System Cross-Site Scripting Vulnerability

Faculty Management System is an open source faculty management system from code-projects. Faculty Management System suffers from a cross-site scripting vulnerability that originates from /admin/pages/yearlevel.php may lead to cross-site scripting...

PT-2023-32858

Name of the Vulnerable Software and Affected Versions code-projects Faculty Management System version 1.0 Description A problematic issue has been found in the Faculty Management System, affecting some unknown functionality of the file /admin/pages/yearlevel.php. The manipulation of the Year...

PT-2023-32857 · Code Projects · Faculty Management System

Name of the Vulnerable Software and Affected Versions: code-projects Faculty Management System version 1.0 Description: A problematic issue was found in the Faculty Management System, affecting an unknown functionality of the file /admin/pages/subjects.php. The manipulation of the Description/Uni...

CVE-2023-7056: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in code-projects Faculty Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/pages/subjects.php. The manipulation of the argument Description/Units leads to cross site scripting. The attack can be...

CVE-2023-7057: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in code-projects Faculty Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/pages/yearlevel.php. The manipulation of the argument Year Level/Section leads to cross site scripting. The...

PT-2023-31436 · Unknown · Customer Support System

Name of the Vulnerable Software and Affected Versions: Customer Support System version v1 Description: The issue is related to incorrect access control, allowing non-administrator users to access administrative pages and execute actions that are supposed to be reserved for administrators...

Wing FTP Server Detection (HTTP)

HTTP based detection of Wing FTP Server. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.126600";...

CVE-2023-5979

The eCommerce Product Catalog Plugin for WordPress plugin before 3.3.26 does not have CSRF checks in some of its admin pages, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks, such as delete all products...

PT-2023-32457 · WordPress · Ecommerce Product Catalog Plugin

Name of the Vulnerable Software and Affected Versions: eCommerce Product Catalog Plugin for WordPress versions prior to 3.3.26 Description: The issue is related to the lack of CSRF checks in some admin pages of the plugin, which could allow attackers to make logged-in users perform unwanted actio...

CVE-2023-5979: Cross-Site Request Forgery (CSRF)

The eCommerce Product Catalog Plugin for WordPress plugin before 3.3.26 does not have CSRF checks in some of its admin pages, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks, such as delete all products...

DRUPAL-CONTRIB-2023-037

This module enables you to build administrative pages for managing configuration objects, which may then be used elsewhere in the site. The module doesn't sufficiently validate access when the JSONAPI module is also installed. This vulnerability is mitigated by the fact that it only affects sites...