6 matches found
CVE-2023-1563
A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/assign/assign.php. The manipulation of the argument id leads to sql injection. The attack can ...
CVE-2023-1567
A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/assign/assign.php. The manipulation of the argument sid leads to cross site scripting. The attack may be...
CVE-2023-1563: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/assign/assign.php. The manipulation of the argument id leads to sql injection. The attack can ...
CVE-2023-1567: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/assign/assign.php. The manipulation of the argument sid leads to cross site scripting. The attack may be...
PT-2022-20340
Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the admin/client assign.php endpoint. This allows for potential unauthorized access or manipulation of data. Recommendations Fo...
PT-2022-20346
Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /Wedding-Management/admin/client assign.php endpoint, specifically through the booking and user id parameters...