CVE-2024-31610: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file...

Sql injection

Code-projects Simple Stock System 1.0 is vulnerable to SQL Injection...

CVE-2024-24095

Code-projects Simple Stock System version 1.0 is vulnerable to SQL Injection (CWE-89). The vulnerability stems from the system's susceptibility to malicious SQL commands, which could impact the confidentiality, integrity, and availability of the data. The provided documents do not specify a parti...

CVE-2024-24095: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Simple Stock System 1.0 is vulnerable to SQL Injection...

CVE-2024-25310

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5."...

CVE-2024-25304

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."...

Sql injection

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacherlogin.php...

CVE-2024-25309: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacherlogin.php...

CVE-2024-25305: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/index.php...

CVE-2024-25313

Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/teacherlogin.php...

CVE-2024-25310

Code-projects Simple School Managment System 1.0 is affected by a SQL Injection in the endpoint School/delete.php?id=5. The vulnerability stems from unsanitized input in the id parameter, enabling arbitrary SQL execution with potential impact on confidentiality, integrity, and availability (CVSSv...

CVE-2024-25304

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."...

CVE-2024-25306

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at "School/index.php"...

CVE-2024-25312: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/subdelete.php?id=5."...

CVE-2024-25312

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/subdelete.php?id=5."...

CVE-2024-25313: Improper Authentication

Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/teacherlogin.php...

CVE-2024-25304: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."...

CVE-2024-25310: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5."...

CVE-2024-25306: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at "School/index.php"...

CVE-2024-25308: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacherlogin.php...