CVE-2024-12007

CVE-2024-12007 affects code-projects Farmacia 1.0. The vulnerability resides in /visualizar-produto.php where manipulating the id parameter leads to SQL injection. Impact is remote exploitation with public disclosure of the exploit. Remediation guidance from PT-2024-17399 suggests input validatio...

PT-2024-17399 · Unknown · Code-Projects Farmacia

Name of the Vulnerable Software and Affected Versions: code-projects Farmacia version 1.0 Description: A critical issue was found in the /visualizar-produto.php file, affecting an unknown part of it. The manipulation of the id argument leads to SQL injection. It is possible to initiate the attack...

CVE-2024-12001 code-projects Wazifa System Setting updatesettings.php cross site scripting

A vulnerability classified as problematic has been found in code-projects Wazifa System 1.0. Affected is an unknown function of the file /controllers/updatesettings.php of the component Setting Handler. The manipulation of the argument firstname leads to cross site scripting. It is possible to...

CVE-2024-12000 code-projects Blood Bank System Setting updatesettings.php cross site scripting

A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /controllers/updatesettings.php of the component Setting Handler. The manipulation of the argument firstname leads to cross site scripting. Th...

CVE-2024-11998

A vulnerability was found in code-projects Farmacia 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /visualizer-forneccedor.chp. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-11998 code-projects Farmacia visualizer-forneccedor.chp sql injection

A vulnerability was found in code-projects Farmacia 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /visualizer-forneccedor.chp. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-11998 code-projects Farmacia visualizer-forneccedor.chp sql injection

A vulnerability was found in code-projects Farmacia 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /visualizer-forneccedor.chp. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-11997

A vulnerability was found in code-projects Farmacia 1.0. It has been classified as problematic. This affects an unknown part of the file /vendas.php. The manipulation of the argument notaFiscal leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-11996

A vulnerability was found in code-projects Farmacia 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /editar-fornecedor.php. The manipulation of the argument cidade leads to cross site scripting. The attack may be launched remotely. The exploit h...

CVE-2024-11997 code-projects Farmacia vendas.php cross site scripting

A vulnerability was found in code-projects Farmacia 1.0. It has been classified as problematic. This affects an unknown part of the file /vendas.php. The manipulation of the argument notaFiscal leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-11996

CVE-2024-11996 affects code-projects Farmacia 1.0. The vulnerability resides in /editar-fornecedor.php, where manipulating the cidade parameter leads to cross-site scripting. It can be exploited remotely, and public exploits have been disclosed. Other parameters may also be affected. Affected com...

PT-2024-17395 · Unknown · Code-Projects Blood Bank System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank System version 1.0 Description: A problem has been found in the Setting Handler component, specifically in the /controllers/updatesettings.php file. The issue affects some unknown processes and can be exploited...

Code-Projects Farmacia 代码注入漏洞

Code-Projects Farmacia is a content management system of Code-Projects open source. A code injection vulnerability exists in Code-Projects Farmacia version 1.0, which stems from the parameter notaFiscal in the file /vendas.php that can lead to cross-site scripting attacks...

Code-Projects Farmacia 注入漏洞

Code-Projects Farmacia is a content management system from Code-Projects open source. An injection vulnerability exists in Code-Projects Farmacia version 1.0, which stems from the parameter id of the file /visualizer-forneccedor.chp that can cause SQL injection...

PT-2024-17392 · Unknown · Code-Projects Farmacia

Name of the Vulnerable Software and Affected Versions: code-projects Farmacia version 1.0 Description: A critical issue has been identified, affecting unknown code in the /visualizer-forneccedor.chp file. The manipulation of the id argument leads to SQL injection. This issue can be exploited...

PT-2024-17391 · Unknown · Code-Projects Farmacia

Name of the Vulnerable Software and Affected Versions: code-projects Farmacia version 1.0 Description: A vulnerability was found in the code, classified as problematic. It affects an unknown part of the file /vendas.php. The manipulation of the notaFiscal argument leads to cross-site scripting. T...

PT-2024-17396 · Unknown · Code-Projects Wazifa System

Name of the Vulnerable Software and Affected Versions: code-projects Wazifa System version 1.0 Description: A vulnerability has been found in the code-projects Wazifa System, affecting an unknown function of the file /controllers/updatesettings.php of the component Setting Handler. The manipulati...

CVE-2024-11995

A vulnerability has been found in code-projects Farmacia 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /pagamento.php. The manipulation of the argument total leads to cross site scripting. The attack can be launched remotely. The exploit...

CVE-2024-11995 code-projects Farmacia pagamento.php cross site scripting

A vulnerability has been found in code-projects Farmacia 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /pagamento.php. The manipulation of the argument total leads to cross site scripting. The attack can be launched remotely. The exploit...

CVE-2024-11995 code-projects Farmacia pagamento.php cross site scripting

A vulnerability has been found in code-projects Farmacia 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /pagamento.php. The manipulation of the argument total leads to cross site scripting. The attack can be launched remotely. The exploit...