267 matches found
Online-College-Event-Hall-Reservation-System Cross-Site Scripting Vulnerability
Online-College-Event-Hall-Reservation-System is an online college event hall reservation system by Magesh K individual developer. Designed to automate the hall booking process to eliminate manual logging and increase efficiency. A cross-site scripting vulnerability exists in...
PT-2024-20887
Name of the Vulnerable Software and Affected Versions MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0 Description A critical vulnerability was found in the system, affecting an unknown functionality of the file /admin/update-users.php. The manipulation of the id argument leads...
PT-2024-20879
Name of the Vulnerable Software and Affected Versions MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0 Description A critical vulnerability has been found in the system, affecting an unknown function of the file /admin/update-rooms.php. The manipulation leads to unrestricted...
CVE-2024-2532: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/update-users.php. The manipulation of the argument id leads to sql injection. The attack can be launched...
CVE-2024-2531: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical has been found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. Affected is an unknown function of the file /admin/update-rooms.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has...
CVE-2024-2528: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in MAGESH-K21 Online-College-Event-Hall-Reservation-System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/update-rooms.php. The manipulation of the argument roomid leads to sql injection. It is possible to initiate the attack...
PT-2024-20891
Name of the Vulnerable Software and Affected Versions MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0 Description A problematic issue has been found in the system, affecting some unknown functionality of the file /admin/update-users.php. The manipulation of the id argument lea...
PT-2024-20856
Name of the Vulnerable Software and Affected Versions MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0 Description A critical issue was found in the system, affecting an unknown part of the file /admin/update-rooms.php. The manipulation of the room id argument leads to SQL...
PT-2024-20869
Name of the Vulnerable Software and Affected Versions MAGESH-K21 Online-College-Event-Hall-Reservation-System version 1.0 Description A vulnerability was found in the system, affecting the processing of the file /admin/update-rooms.php. The manipulation of the id argument leads to cross-site...
CXBSoft Url-shorting SQL Injection Vulnerability
CXBSoft Url-shorting is CXBSoft open source a library that can shorten the URL . CXBSoft Url-shorting 1.3.1 and previous versions of the existence of SQL injection vulnerability , the vulnerability stems from the file /admin/pages/updatego.php parameter version of the existence of SQL injection...
CVE-2023-7141
A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/update-clients.php. The manipulation of the argument uid leads to sql injection. The exploit has been disclosed to the public and may be...
Sql injection
A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/update-clients.php. The manipulation of the argument uid leads to sql injection. The exploit has been disclosed to the public and may be...
CVE-2023-7141: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/update-clients.php. The manipulation of the argument uid leads to sql injection. The exploit has been disclosed to the public and may be...
GHSA-R222-MCFF-27FF Cross-Site Request Forgery in JFinalCMS via /admin/div/update
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/div/update...
CVE-2023-5926
A vulnerability, which was classified as critical, was found in Campcodes Simple Student Information System 1.0. Affected is an unknown function of the file /admin/students/updatestatus.php. The manipulation of the argument studentid leads to sql injection. The exploit has been disclosed to the...
PT-2023-11592 · Feehicms · Feehicms
Name of the Vulnerable Software and Affected Versions: Feehicms version 2.0.8 Description: The issue allows a remote attacker to execute arbitrary code via the "/admin/index.php?r=admin-user%2Fupdate-self" component. This is a File Upload vulnerability, which can be exploited by a remote attacker...
PT-2023-22799 · Sourcecodester · Sourcecodester Online Exam Form Submission
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A critical issue was found in the file /admin/update s6.php, where the manipulation of the id argument leads to SQL injection. This issue can be exploited remotely...
Kliqqi SQL Injection Vulnerability
Kliqqi is a content management system CMS. A security vulnerability exists in Kliqqi-CMS version 2.0.2, which was discovered to contain an SQL injection vulnerability via the recordIDValue parameter of the admin/adminupdatemodulewidgets.php file. An attacker could exploit this vulnerability to...
CVE-2020-21119
CVE-2020-21119 refers to a SQL Injection vulnerability in Kliqqi-CMS 2.0.2. The issue resides in admin/admin_update_module_widgets.php, specifically in the recordIDValue parameter, enabling an attacker to gain escalated privileges and execute arbitrary code. The available connected documents cons...