CVE-2024-41551

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via SupplyManagementSystem/admin/vieworderitems.php?id=...

CVE-2024-41550

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via SupplyManagementSystem/admin/viewinvoiceitems.php?id=...

CVE-2024-41551

The CVE describes a SQL injection vulnerability in CampCodes Supplier Management System v1.0, exploitable through the endpoint Supply_Management_System/admin/view_order_items.php?id=, affecting the application’s handling of the id parameter. Documented impact aligns with high severity CVSS signal...

CVE-2024-41551

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via SupplyManagementSystem/admin/vieworderitems.php?id=...

CVE-2024-41551: Improper Neutralization of Special Elements used in an SQL Command

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via SupplyManagementSystem/admin/vieworderitems.php?id=...

CVE-2024-41550

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via SupplyManagementSystem/admin/viewinvoiceitems.php?id=...

CampCodes Supplier Management System 安全漏洞

Campcodes Supplier Management System is a supplier management system from Campcodes, Inc. A security vulnerability exists in CampCodes Supplier Management System version v1.0, which stems from an SQL injection vulnerability via SupplyManagementSystem/admin/vieworderitems.php?id=...

CVE-2024-41550

The CampCodes Supplier Management System v1.0 is vulnerable to SQL injection (CWE-89) via the Supply_Management_System/admin/view_invoice_items.php?id= endpoint. This vulnerability allows an attacker to interfere with the queries that the application makes to its database. While exploitation deta...

CVE-2024-41550: Improper Neutralization of Special Elements used in an SQL Command

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via SupplyManagementSystem/admin/viewinvoiceitems.php?id=...

CampCodes Supplier Management System 安全漏洞

Campcodes Supplier Management System is a supplier management system from Campcodes, Inc. A security vulnerability exists in CampCodes Supplier Management System version v1.0, which stems from an SQL injection vulnerability via SupplyManagementSystem/admin/viewinvoiceitems.php?id=...

CVE-2024-41550

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via SupplyManagementSystem/admin/viewinvoiceitems.php?id=...

CVE-2024-41551

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via SupplyManagementSystem/admin/vieworderitems.php?id=...

PT-2024-29442

Name of the Vulnerable Software and Affected Versions CampCodes Supplier Management System version 1.0 Description The issue concerns SQL injection. It can be exploited via the "Supply Management System/admin/view invoice items.php?id=" API endpoint, specifically through the id variable...

VulnCheck KEV: CVE-2023-2215

A vulnerability classified as critical has been found in Campcodes Coffee Shop POS System 1.0. Affected is an unknown function of the file /admin/user/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-33402

A SQL injection vulnerability in /model/approvepettycash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-33402

A SQL injection vulnerability in /model/approvepettycash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-33804

A SQL injection vulnerability in /model/getsubject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-33801

A SQL injection vulnerability in /model/getsubjectrouting.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-33802

A SQL injection vulnerability in /model/getstudentsubject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter...

CVE-2024-33807

A SQL injection vulnerability in /model/getteachertimetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter...