56 matches found
CVE-2024-6043
CVE-2024-6043 root@kitploit: CVE-2024-6043 CVE-2024-6043 Resumen Esta herramienta de Python explota la vulnerabilidad CVE-2024-6043, que afecta a SourceCodester Best House Rental Management System 1.0. La vulnerabilidad permite a atacantes remotos realizar Inyección SQL a través del archivo...
CVE-2026-78202
A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function savesettings of the file adminclass.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used...
EUVD-2026-64741
A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function savesettings of the file adminclass.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used...
CVE-2026-78202 itsourcecode Payroll System admin_class.php save_settings unrestricted upload
A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function savesettings of the file adminclass.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used...
CVE-2026-78202
itsourcecode Payroll System 1.0 is affected by an unrestricted file upload vulnerability in the save_settings function of the file admin_class.php . The root cause is improper handling of the img argument, which allows a remote attacker to upload arbitrary files without authentication. The impact...
EUVD-2026-64740
A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the file adminclass.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the publ...
CVE-2026-78201
CVE-2026-78201 is a SQL injection vulnerability in itsourcecode Payroll System 1.0 , specifically in the Login function of admin_class.php . The Username parameter is vulnerable to unsanitized input, allowing a remote, unauthenticated attacker to inject arbitrary SQL. The CVSS 3.1 score is 7.3 (H...
EUVD-2025-36066
A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /adminclass.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been mad...
EUVD-2020-23003
Malware in sbrugna...
EUVD-2022-34919
Malicious code in bioql PyPI...
EUVD-2025-26352
Malicious code in bioql PyPI...
EUVD-2024-27120
Malicious code in bioql PyPI...
EUVD-2023-12379
Malicious code in bioql PyPI...
CVE-2025-9788
SourceCodester/Campcodes School Log Management System 1.0 is affected by a SQL injection in an unknown functionality of /admin/admin_class.php. The vulnerability arises from manipulation of the id_no parameter and can be exploited remotely without authentication. Public disclosures exist describi...
CVE-2024-46375
Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup function of the file rental/adminclass.php...
CVE-2020-35327
SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the refno POST parameter to adminclass.php...
CVE-2024-6196
A vulnerability was found in itsourcecode Banking Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file adminclass.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit h...
CVE-2024-48581
File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the adminclass.php component...
CVE-2024-48581
Affected product: Best Courier Management System (PHP) v1.0. Vulnerable component: admin_class.php via file upload, enabling remote code execution (CVE-2024-48581). Root cause: unrestricted/unsafe file upload leading to arbitrary code execution. Impact: high confidentiality, integrity, and availa...
