CVE-2024-12787

A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/checkstudentlogin.php. The manipulation of the argument studentemailid leads to sql injection. The...

CVE-2024-12787

A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/checkstudentlogin.php. The manipulation of the argument studentemailid leads to sql injection. The...

CVE-2024-12787 1000 Projects Attendance Tracking Management System check_student_login.php sql injection

A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/checkstudentlogin.php. The manipulation of the argument studentemailid leads to sql injection. The...

CVE-2024-12787 1000 Projects Attendance Tracking Management System check_student_login.php sql injection

A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/checkstudentlogin.php. The manipulation of the argument studentemailid leads to sql injection. The...

CVE-2024-12787

CVE-2024-12787 affects 1000 Projects Attendance Tracking Management System v1.0, with a SQL injection in the /student/check_student_login.php endpoint via the student_emailid parameter. The vulnerability is exploitable remotely and has been publicly disclosed. Multiple sources corroborate an atta...

PT-2024-17737 · Unknown · 1000 Projects Attendance Tracking Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Attendance Tracking Management System version 1.0 Description: A critical issue has been identified in the 1000 Projects Attendance Tracking Management System, affecting an unknown functionality of the file /student/check studen...

1000 Projects Attendance Tracking Management System 注入漏洞

1000 Projects Attendance Tracking Management System is an open source attendance management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Attendance Tracking Management System version 1.0, which originates from an SQL injection vulnerability in the studentemailid...

Upcoming Speaking Events

This is a current list of where and when I am scheduled to speak: I'm speaking at a joint meeting of the Boston Chapter of the IEEE Computer Society and GBC/ACM, in Boston, Massachusetts, USA, at 7:00 PM ET on Thursday, January 9, 2025. The event will take place at the Massachusetts Institute of...

CVE-2024-12497

A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...

CVE-2024-12497

A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...

1000 Projects Attendance Tracking Management System 注入漏洞

1000 Projects Attendance Tracking Management System is an open source attendance management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Attendance Tracking Management System version 1.0, which originates from the parameter adminusername in the file...

CVE-2024-12497

CVE-2024-12497 affects 1000 Projects Attendance Tracking Management System 1.0. The vulnerability is an SQL injection in the file /admin/check_admin_login.php via the admin_user_name parameter. It can be triggered remotely and an exploit has been disclosed publicly. No remediation details are pro...

CVE-2024-12497 1000 Projects Attendance Tracking Management System check_admin_login.php sql injection

A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...

CVE-2024-12497 1000 Projects Attendance Tracking Management System check_admin_login.php sql injection

A vulnerability classified as critical has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected is an unknown function of the file /admin/checkadminlogin.php. The manipulation of the argument adminusername leads to sql injection. It is possible to launch the attack...

CVE-2024-10534

Origin Validation Error vulnerability in Dataprom Informatics Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS allows Traffic Injection. This issue affects Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS: before 2024...

CVE-2024-10534

Origin Validation Error vulnerability in Dataprom Informatics Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS allows Traffic Injection.This issue affects Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS: before 2024...

CVE-2024-10534 Improper Access Control in Dataprom Informatics' PACS-ACSS

Origin Validation Error vulnerability in Dataprom Informatics Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS allows Traffic Injection. This issue affects Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS: before 2024...

CVE-2024-10534 Improper Access Control in Dataprom Informatics' PACS-ACSS

Origin Validation Error vulnerability in Dataprom Informatics Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS allows Traffic Injection. This issue affects Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS: before 2024...

CVE-2024-10534

CVE-2024-10534 affects Dataprom Informatics’ PACS/ACSS products, caused by an origin validation error that enables traffic injection. The vulnerability, described as an improper origin check affecting PACS/ACSS prior to 2024, is documented with high-severity impact (traffic manipulation). Connect...

PT-2024-16351

Name of the Vulnerable Software and Affected Versions Dataprom Informatics Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS versions prior to 2024 Description The issue is related to an Origin Validation Error, which allows traffic injection. This affects the...