49 matches found
EUVD-2025-36066
A vulnerability was found in SourceCodester Best House Rental Management System 1.0. This impacts the function login2 of the file /adminclass.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been mad...
EUVD-2020-23003
Malware in sbrugna...
EUVD-2023-12379
Malicious code in bioql PyPI...
EUVD-2024-27120
Malicious code in bioql PyPI...
EUVD-2022-34919
Malicious code in bioql PyPI...
EUVD-2025-26352
Malicious code in bioql PyPI...
CVE-2025-9788
SourceCodester/Campcodes School Log Management System 1.0 is affected by a SQL injection in an unknown functionality of /admin/admin_class.php. The vulnerability arises from manipulation of the id_no parameter and can be exploited remotely without authentication. Public disclosures exist describi...
CVE-2024-46375
Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup function of the file rental/adminclass.php...
CVE-2020-35327
SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the refno POST parameter to adminclass.php...
CVE-2024-6196
A vulnerability was found in itsourcecode Banking Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file adminclass.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit h...
CVE-2024-48581
Affected product: Best Courier Management System (PHP) v1.0. Vulnerable component: admin_class.php via file upload, enabling remote code execution (CVE-2024-48581). Root cause: unrestricted/unsafe file upload leading to arbitrary code execution. Impact: high confidentiality, integrity, and availa...
CVE-2024-48581
File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the adminclass.php component...
CVE-2024-46376
Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the updateaccount function of the file rental/adminclass.php...
CVE-2024-46374
CVE-2024-46374 affects Best House Rental Management System 1.0. A SQL injection exists in the delete_category() function of rental/admin_class.php. The vulnerability has CVSSv3.1: network attack vector, low complexity, no privileges, user interaction none, with impacts on confidentiality, integri...
CVE-2024-46374
Best House Rental Management System 1.0 contains a SQL injection vulnerability in the deletecategory function of the file rental/adminclass.php...
CVE-2024-8709 SourceCodester Best House Rental Management System admin_class.php save_user sql injection
A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. Affected is the function deleteuser/saveuser of the file /adminclass.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2024-7500 itsourcecode Airline Reservation System admin_class.php save_settings unrestricted upload
A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been rated as critical. Affected by this issue is the function savesettings of the file admin/adminclass.php. The manipulation of the argument img leads to unrestricted upload. The attack may be launched remotely. Th...
CVE-2024-7500 itsourcecode Airline Reservation System admin_class.php save_settings unrestricted upload
A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been rated as critical. Affected by this issue is the function savesettings of the file admin/adminclass.php. The manipulation of the argument img leads to unrestricted upload. The attack may be launched remotely. Th...
CVE-2024-6196
A vulnerability was found in itsourcecode Banking Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file adminclass.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit h...
CVE-2024-6196
Evidence across multiple connected documents confirms CVE-2024-6196 affects itsourcecode Banking Management System 1.0, with a SQL injection in the admin_class.php file triggered via the username parameter. The vulnerability is exploitable remotely and was disclosed publicly. Several sources labe...