10 matches found
CVE-2024-25304
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."...
CVE-2024-25304
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."...
CVE-2024-25304
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."...
CVE-2024-25304
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."...
PT-2024-20873 · Code Projects · Code-Projects Simple School Managment System
Name of the Vulnerable Software and Affected Versions: Code-projects Simple School Managment System version 1.0 Description: The issue allows SQL Injection via the apass parameter at the "School/index.php" endpoint. This could potentially lead to unauthorized access to sensitive data...
CVE-2024-25304
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."...
Command injection
ircu 2.10.12.01 allows remote attackers to 1 cause a denial of service flood wallops by joining two channels with certain long names that differ in the final character, which triggers a protocol violation and 2 cause a denial of service daemon crash via a "J 0:channel" message on a channel withou...
CVE-2007-4407
ircu 2.10.12.03 and 2.10.12.04 does not associate a timestamp with ops privilege on an unused channel zannel, which allows remote attackers to 1 set or remove certain channel modes via a "netriding" attack or 2 take over a channel by joining an unlinked server with the A/Upass and then setting a...
CVE-2007-4407
ircu 2.10.12.03 and 2.10.12.04 does not associate a timestamp with ops privilege on an unused channel zannel, which allows remote attackers to 1 set or remove certain channel modes via a "netriding" attack or 2 take over a channel by joining an unlinked server with the A/Upass and then setting a...
CVE-2007-4409
CVE-2007-4409 describes a race condition in ircu versions 2.10.12.01–2.10.12.05 that can let remote attackers gain an Apass during a netburst by pre-granting ops privileges before the mode arrives. This is a privilege-change vulnerability in the IRC server component. Impact: potential privilege e...