CVE-2024-34954

Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting XSS via the budget parameter...

CVE-2024-34954

Code-projects Budget Management version 1.0 is vulnerable to Cross-Site Scripting (XSS) . The vulnerability exists because the application fails to properly neutralize input during web page generation specifically via the budget parameter . This flaw allows for potential malicious script injectio...

CVE-2024-34954: Improper Neutralization of Input During Web Page Generation

Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting XSS via the budget parameter...

PT-2024-26269 · Unknown · Code-Projects Budget Management

Name of the Vulnerable Software and Affected Versions: Code-projects Budget Management version 1.0 Description: The issue concerns Cross Site Scripting XSS via the budget parameter. This allows for potential malicious script injection, affecting the security of the application. Recommendations: F...

PT-2024-26270 · Unknown · Code-Projects Budget Management

Name of the Vulnerable Software and Affected Versions: Code-projects Budget Management version 1.0 Description: The issue is related to SQL Injection, which occurs via the delete parameter. This allows for potential manipulation of database queries. Recommendations: For Code-projects Budget...

CVE-2024-34955: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter...

CVE-2024-28279

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...

CVE-2024-28279: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...

College Management System SQL注入漏洞

College Management System is a simple project organized by Code Projects. It is used to keep track of students, teachers, subjects, schedules and all things related to the university. An SQL injection vulnerability exists in College Management System version 1.0, which stems from an SQL injection...

CVE-2024-28279

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=...

CVE-2024-28279

The Code-projects Computer Book Store version 1.0 is vulnerable to SQL Injection via the book.php?bookisbn= endpoint. This flaw allows an attacker to remotely manipulate the endpoint due to improper neutralization of special elements used in an SQL command. A published proof-of-concept was identi...

PT-2024-22377 · Unknown · Code-Projects Computer Book Store

Name of the Vulnerable Software and Affected Versions: Code-projects Computer Book Store version 1.0 Description: The issue allows for SQL Injection, which can be exploited via the "book.php?bookisbn=" endpoint. An attacker can manipulate this endpoint remotely. It is estimated that a significant...

CVE-2024-31610

File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file...

CVE-2024-31610

File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file...

CVE-2024-31610: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file...

CVE-2024-31610

File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file...

Code-Projects Simple School Management System 安全漏洞

Code-Projects Simple School Management System is an open source school management system from Code-Projects. A security vulnerability exists in Code-Projects Simple School Management System v1.0, which originates from a file upload vulnerability in the upload avatars feature. An attacker can...

CVE-2024-31610

The Code-Projects Simple School Management System v1.0 is affected by a File Upload vulnerability within the avatar upload function intended for employees. An attacker can exploit this flaw by uploading a specially crafted file to achieve arbitrary code execution . To mitigate this risk, it is re...

CVE-2024-3369

CVE-2024-3369 affects code-projects Car Rental 1.0. The vulnerability is in add-vehicle.php, where manipulation of the Upload Image parameter enables unrestricted file upload. This can be exploited remotely and has been disclosed publicly, classed as critical with high impact to confidentiality, ...

CVE-2024-3369: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in code-projects Car Rental 1.0. Affected by this issue is some unknown functionality of the file add-vehicle.php. The manipulation of the argument Upload Image leads to unrestricted upload. The attack may be launched remotely. The...