CVE-2023-2772 SourceCodester Budget and Expense Tracker System GET Parameter manage_budget.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Budget and Expense Tracker System 1.0. Affected is an unknown function of the file /admin/budget/managebudget.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It i...

CVE-2023-2772

CVE-2023-2772 concerns SourceCodester Budget and Expense Tracker System 1.0. The vulnerability is an SQL injection in the GET parameter handler, specifically an unknown function of /admin/budget/manage_budget.php where the id argument is manipulated to inject SQL. This vulnerability can be exploi...

Sourcecodester Budget And Expense Tracker System SQL注入漏洞

Budget And Expense Tracker System is a web based application. It is used to manage your personal/small business budget and expenses. Budget and Expense Tracker System v1.0 suffers from a SQL injection vulnerability that originates from a lack of validation of the parameter id of...

PT-2023-21308 · Unknown · Sourcecodester Budget/Expense Tracker System

Name of the Vulnerable Software and Affected Versions: SourceCodester Budget and Expense Tracker System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /admin/budget/manage budget.php of the component GET Parameter Handler. The...

It is possible to steal the unallocated part of every delegation period budget

Lines of code Vulnerability details Attacker can monitor the standard proposals distribution and routinely steal each low activity period remainder by submitting a transfer to self proposal and voting a dust amount for it. Since the criteria for the final slate update is that any increase in tota...

Treasury accounting miss voters rewards

Lines of code Vulnerability details treasury is overstated over time as each distribution period it adds back the delegate rewards part, which is actually spent on voters rewards. I.e. it is updated with fundsAvailable - totalTokensRequested difference, while totalTokensRequested is limited to 90...

CVE-2023-26860

SQL injection vulnerability found in PrestaShop Igbudget v.1.0.3 and before allow a remote attacker to gain privileges via the LgBudgetBudgetModuleFrontController::displayAjaxGenerateBudget component...

PT-2023-20831 · Prestashop · Prestashop Igbudget

Name of the Vulnerable Software and Affected Versions: PrestaShop Igbudget versions 1.0.3 and earlier Description: A SQL injection issue allows a remote attacker to gain privileges via the LgBudgetBudgetModuleFrontController::displayAjaxGenerateBudget component. This enables the attacker to...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop Igbudget version v.1.0.3 and earlier versions. An attacker...

CVE-2023-26858

SQL injection vulnerability found in PrestaSHp faqs v.3.1.6 allows a remote attacker to escalate privileges via the faqsBudgetModuleFrontController::displayAjaxGenerateBudget component...

PrestaSHp faqs SQL注入漏洞

PrestaSHp faqs is a FAQ page from PrestaSHp. A security vulnerability exists in PrestaSHp faqs version v.3.1.6, which stems from the discovery of a contained elevation of privilege vulnerability via the faqsBudgetModuleFrontController::displayAjaxGenerateBudget component...

Learn what an AI-driven future means for cybersecurity at Microsoft Secure

Maintaining security across today’s vast digital ecosystem is a team effort. AI and machine learning have helped to detect threats quickly and respond effectively. Yet we all know that the best defense still requires human wisdom and experience. From a frontline security operations admin to the...

Introducing Malware Protection for Scanning File Uploads

With Malware Protection, you can scan once at the edge and prevent malware from draining your time and budget...

Deny of service in CCash.sol with "transfer" which can be unusable for smart contract calls

Lines of code Vulnerability details Impact The CCash.doTransferOut method is susceptible to denial of service. Proof of Concept The logic of the doTransferOut method in CCash is as follows: The whole user withdraw is being handled with a token.transfer call. This is unsafe as transfer has hard...

4 Cybersecurity Budget Management Tips

Learn how CISOs and security leaders can strategically manage their cybersecurity budget to run more productive security teams amid a recession and skills shortage...

Command Execution Vulnerabilities in the Budget Networking Supervision System of the National People's Congress of Beijing UFIDA Government Affairs Software Co.

Beijing UFIDA Government Software Co., Ltd. is a comprehensive business management information solution provider for government departments, institutions and non-profit organizations. A command execution vulnerability exists in the NPC Budget Networking Supervision System of Beijing UFIDA...

Can Cloud Security Be Easier Than Complex?

A bigger piece of the meal For those in the United States and certain parts of the world, it’s time for end-of-year holidays. That means lots and lots of big meals to celebrate these special occasions. Each dish created becomes part of that larger meal. Another important event that occurs around...

kernel: bfq: Update cgroup information before merging bio

In the Linux kernel, the following vulnerability has been resolved: bfq: Update cgroup information before merging bio When the process is migrated to a different cgroup or in case of writeback just starts submitting bios associated with a different cgroup bfqmergebio can operate with stale cgroup...

7 Ways Imperva Solutions Reduce the Cost of Data Security

As we push into Q4, economic uncertainty caused by rising interest rates, as-yet unchecked inflation, and a bear market is driving many enterprises to buck the trend and tighten cyber security budgets for the last three months of 2022. The result is increased pressure to achieve data security whi...

Local government cybersecurity: 5 best practices

It seems like not a day goes by where we dont hear about a local government cyberattack. Indeed, from 911 call centers to public schools, cyberattacks on local governments are as common as they are devastating. Just how often do threat actors attack local governments? A survey of 14 mainly larger...