CVE-2024-10700 code-projects University Event Management System submit.php sql injection

A vulnerability was found in code-projects University Event Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file submit.php. The manipulation of the argument name/email/title/Year/gender/fromdate/todate/people leads to sql injection. The...

CVE-2024-10699 code-projects Wazifa System logincontrol.php sql injection

A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknown part of the file /controllers/logincontrol.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

CVE-2024-10699: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknown part of the file /controllers/logincontrol.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

PT-2024-16473 · Unknown · Code-Projects Wazifa System

Name of the Vulnerable Software and Affected Versions: code-projects Wazifa System version 1.0 Description: A critical issue was found in the code-projects Wazifa System, affecting an unknown part of the file /controllers/logincontrol.php. The manipulation of the username argument leads to SQL...

Code-Projects University Event Management System SQL注入漏洞

Code-Projects University Event Management System is an open source university event management system from Code-Projects. Code-Projects University Event Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from the parameter...

Code-Projects Simple Car Rental System SQL注入漏洞

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A SQL injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from the parameter fname in the file /signup.php that can lead to SQL injection...

CVE-2024-10700: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects University Event Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file submit.php. The manipulation of the argument name/email/title/Year/gender/fromdate/todate/people leads to sql injection. The...

CVE-2024-10608 code-projects Courier Management System login.php sql injection

A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2024-10608 code-projects Courier Management System login.php sql injection

A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2024-10605 code-projects Blood Bank Management System request.php cross-site request forgery

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /file/request.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2024-10605

CVE-2024-10605 affects Code-Projects Blood Bank Management System 1.0. The vulnerability is a cross-site request forgery in an unspecified portion of the file /file/request.php. Attack is feasible remotely and exploitation is possible without user privileges, with user interaction required per CV...

CVE-2024-10557 code-projects Blood Bank Management System updateprofile.php cross-site request forgery

A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /file/updateprofile.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely...

Code-Projects Blood Bank Management System 跨站请求伪造漏洞

Code-Projects Blood Bank Management System is a Code-Projects open source blood bank management system. A cross-site request forgery vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which originates from a cross-site request forgery vulnerability contained in the fi...

CVE-2024-10506

A vulnerability classified as critical has been found in code-projects Blood Bank System 1.0. This affects an unknown part of the file /admin/blood/update/B-.php. The manipulation of the argument Bloodname leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2024-10506 code-projects Blood Bank System B-.php sql injection

A vulnerability classified as critical has been found in code-projects Blood Bank System 1.0. This affects an unknown part of the file /admin/blood/update/B-.php. The manipulation of the argument Bloodname leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2024-10506

CVE-2024-10506 affects code-projects Blood Bank System 1.0. A SQL injection vulnerability exists in the /admin/blood/update/B-.php file through manipulation of the Bloodname parameter. Exploitation can be performed remotely; the exploit has been disclosed publicly. Multiple sources corroborate th...

Code-Projects Blood Bank System SQL注入漏洞

Code-Projects Blood Bank System is an open source blood bank management system from Code-Projects. A SQL injection vulnerability exists in Code-Projects Blood Bank System version 1.0, which stems from an incorrect manipulation of the Bloodname parameter that can lead to SQL injection...

CVE-2024-10506: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Blood Bank System 1.0. This affects an unknown part of the file /admin/blood/update/B-.php. The manipulation of the argument Bloodname leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2024-10448 code-projects Blood Bank Management System delete.php cross-site request forgery

A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank Management System 1.0. Affected by this issue is some unknown functionality of the file /file/delete.php. The manipulation of the argument bid leads to cross-site request forgery. The attack may be...

CVE-2024-10448

CVE-2024-10448 affects Code-Projects Blood Bank Management System 1.0. The vulnerability is a cross-site request forgery in an unknown subset of the application, specifically involving the /file/delete.php endpoint and the bid parameter. The issue can be triggered remotely and has been publicly d...