CVE-2024-10995

The CVE-2024-10995 entry affects Codezips Hospital Appointment System 1.0. The vulnerability is in the file /removeDoctorResult.php, where the Name parameter can cause SQL injection. It may be exploited remotely with low attack complexity and no privileges, risking confidentiality, integrity, and...

CVE-2024-10995 Codezips Hospital Appointment System removeDoctorResult.php sql injection

A vulnerability was found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /removeDoctorResult.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploi...

CVE-2024-10995 Codezips Hospital Appointment System removeDoctorResult.php sql injection

A vulnerability was found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /removeDoctorResult.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploi...

CVE-2024-10994

A vulnerability has been found in Codezips Online Institute Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /edituser.php. The manipulation of the argument image leads to unrestricted upload. The attack can be launched...

CVE-2024-10994

A vulnerability has been found in Codezips Online Institute Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /edituser.php. The manipulation of the argument image leads to unrestricted upload. The attack can be launched...

CVE-2024-10993

A vulnerability, which was classified as critical, was found in Codezips Online Institute Management System 1.0. Affected is an unknown function of the file /managewebsite.php. The manipulation of the argument websiteimage leads to unrestricted upload. It is possible to launch the attack remotely...

CVE-2024-10994 Codezips Online Institute Management System edit_user.php unrestricted upload

A vulnerability has been found in Codezips Online Institute Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /edituser.php. The manipulation of the argument image leads to unrestricted upload. The attack can be launched...

CVE-2024-10994

The CVE-2024-10994 entry refers to Codezips Online Institute Management System 1.0. Affected is the /edit_user.php functionality where manipulating the image parameter enables unrestricted file upload. This remote attack is publicly disclosed and can lead to high-impact outcomes (as reflected in ...

CVE-2024-10994 Codezips Online Institute Management System edit_user.php unrestricted upload

A vulnerability has been found in Codezips Online Institute Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /edituser.php. The manipulation of the argument image leads to unrestricted upload. The attack can be launched...

CVE-2024-10993 Codezips Online Institute Management System manage_website.php unrestricted upload

A vulnerability, which was classified as critical, was found in Codezips Online Institute Management System 1.0. Affected is an unknown function of the file /managewebsite.php. The manipulation of the argument websiteimage leads to unrestricted upload. It is possible to launch the attack remotely...

CVE-2024-10993

Codezips Online Institute Management System 1.0 is affected by CVE-2024-10993 due to an issue in the website_image parameter of /manage_website.php, which allows unrestricted upload. The vulnerability enables remote exploitation and the exploit has been disclosed publicly. Technical details acros...

CVE-2024-10993 Codezips Online Institute Management System manage_website.php unrestricted upload

A vulnerability, which was classified as critical, was found in Codezips Online Institute Management System 1.0. Affected is an unknown function of the file /managewebsite.php. The manipulation of the argument websiteimage leads to unrestricted upload. It is possible to launch the attack remotely...

CVE-2024-10991

A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /editBranchResult.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploi...

CVE-2024-10991 Codezips Hospital Appointment System editBranchResult.php sql injection

A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /editBranchResult.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploi...

CVE-2024-10991

The CVE-2024-10991 entry affects Codezips Hospital Appointment System 1.0, with the vulnerability located in /editBranchResult.php where manipulation of the ID parameter leads to SQL injection. The attack is described as remotely initiable, with public disclosure of the exploit. Concrete technica...

CVE-2024-10991 Codezips Hospital Appointment System editBranchResult.php sql injection

A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /editBranchResult.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploi...

CVE-2024-10991: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /editBranchResult.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploi...

CVE-2024-10994: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in Codezips Online Institute Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /edituser.php. The manipulation of the argument image leads to unrestricted upload. The attack can be launched...

Codezips Hospital Appointment System 注入漏洞

Codezips Hospital Appointment System is Codezips open source a hospital appointment system. An injection vulnerability exists in Codezips Hospital Appointment System version 1.0, which stems from the parameter Name in the file /removeDoctorResult.php that can cause SQL injection...

Codezips Online Institute Management System 安全漏洞

Codezips Online Institute Management System is an open source online institute management system from Codezips. A security vulnerability exists in Codezips Online Institute Management System version 1.0, which stems from the parameter image in the file /edituser.php that can lead to unrestricted...