AzureSoft MyHorus security vulnerabilities

AzureSoft MyHorus is a global supervisory system from AzureSoft, Inc. A security vulnerability exists in AzureSoft MyHorus version 4.3.5 that stems from the presence of a SQL injection vulnerability that allows an authenticated user to execute arbitrary SQL commands via an unspecified vector...

Tailoring Management System SQL Injection

The vulnerability of the setgeneral.php file in the Tailoring Management System TMS involves a lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code, gain unauthorized access to read, modify, or delete data, or cause ...

PT-2024-41122

Уязвимость средства виртуализации VMmanager 6 связанная с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнять произвольные SQL-запросы к базе данных...

Learning Management System SQL Injection Vulnerability (CNVD-2024-35193)

Learning Management System is itsourcecode open source a learning management system . Learning Management System version 1.0 suffers from a SQL injection vulnerability , the vulnerability stems from the application lack of validation of external input SQL statements . Attackers can use this...

Payroll Management System SQL Injection Vulnerability

Payroll Management System is a payroll management system. A SQL injection vulnerability exists in Payroll Management System version 1.0, which stems from the application's lack of validation of externally entered SQL statements. A remote attacker can exploit this vulnerability to execute arbitrar...

SQL Injection

zendframework/zendframework1 is vulnerable to SQL Injection. The vulnerability is due to the improper handling of SQL expressions and comments in the ORDER BY and GROUP BY clauses. Attackers can exploit this vulnerability by injecting malicious SQL code that can alter the intended SQL query and...

CVE-2024-37871

SQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP with Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via the email parameter...

Payroll Management System security vulnerabilities

Payroll Management System is a payroll management system. A SQL injection vulnerability exists in Payroll Management System version 1.0, which stems from the application's lack of validation of externally entered SQL statements. A remote attacker can exploit this vulnerability to execute arbitrar...

CVE-2024-37871

SQL injection vulnerability in login.php in Itsourcecode Online Discussion Forum Project in PHP with Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via the email parameter...

CVE-2024-37873: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewpayslip.php in Itsourcecode Payroll Management System Project In PHP With Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2024-37873

SQL injection vulnerability in viewpayslip.php in Itsourcecode Payroll Management System Project In PHP With Source Code 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2024-37873

CVE-2024-37873 describes an SQL injection in the Itsourcecode Payroll Management System Project In PHP With Source Code 1.0, through the id parameter of view_payslip.php. The root cause is unsafely constructed SQL statements allowing remote attackers to inject arbitrary SQL. Affects: view_payslip...

CVE-2024-37872

SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2024-37872

SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Online Discussion Forum Security Vulnerabilities

Online Discussion Forum is a forum website. A security vulnerability exists in Online Discussion Forum version 1.0, which originates from a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via email parameters...

WS-2024-0013

A logical flaw in the pgcron extension allows low-privileged users with ownership over pgcron's job table or ability to change the value of cron.databasename to run arbitrary SQL queries as any user including superusers. This is also possible if superuser jobs are explicitly disabled. An attacker...

Daily Expenses Management System SQL Injection

The vulnerability of the add-expense.php file in the Daily Expenses Management System is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary SQL commands using specially created POST...

CVE-2024-29390

Daily Expenses Management System version 1.0, developed by PHP Gurukul, contains a time-based blind SQL injection vulnerability in the 'add-expense.php' page. An attacker can exploit the 'item' parameter in a POST request to execute arbitrary SQL commands in the backend database. This can be done...

PT-2024-5129

Name of the Vulnerable Software and Affected Versions: Arfa-CMS affected versions not specified Description: The issue is related to the lack of protection measures for the SQL query structure in Arfa-CMS, allowing a remote attacker to execute arbitrary SQL queries. Recommendations: At the moment...

CVE-2024-37840

SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Code v1.0 allows remote attackers to execute arbitrary SQL commands via the LessonID parameter...