PT-2024-39858 · Unknown · Codezips Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: Codezips Pharmacy Management System version 1.0 Description: A critical issue has been found in the processing of the file product/register.php, where the manipulation of the category argument leads to SQL injection. The attack may be initiat...

Codezips Online Shopping Portal 代码问题漏洞

Codezips Online Shopping Portal is a Codezips open source online store system. A code issue vulnerability exists in Codezips Online Shopping Portal version 1.0, which stems from the parameter productimage1 in /update-image1.php that can lead to unrestricted uploads...

Codezips Pharmacy Management System SQL注入漏洞

Codezips Pharmacy Management System is a pharmacy management system from Codezips. A SQL injection vulnerability exists in Codezips Pharmacy Management System version 1.0, which originates in the file produc/Register.php with the parameter category that can lead to SQL injection...

Codezips Pharmacy Management System SQL注入漏洞

Codezips Pharmacy Management System is a pharmacy management system from Codezips. A SQL injection vulnerability exists in Codezips Pharmacy Management System version 1.0, which stems from a parameter id in the file produc/update.php that can lead to SQL injection...

CVE-2024-9813: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Codezips Pharmacy Management System 1.0. This issue affects some unknown processing of the file product/register.php. The manipulation of the argument category leads to sql injection. The attack may be initiated remotely. The...

PT-2024-39859 · Unknown · Codezips Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: Codezips Pharmacy Management System version 1.0 Description: A critical vulnerability was found in the Codezips Pharmacy Management System. The issue affects an unknown function of the file product/update.php, where the manipulation of the id...

PT-2024-39842 · Unknown · Codezips Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Codezips Online Shopping Portal version 1.0 Description: A critical issue has been found in the processing of the file /update-image1.php, where the manipulation of the productimage1 argument leads to unrestricted upload. This issue can be...

PT-2024-39860 · Codezips · Codezips Tourist Management System

Name of the Vulnerable Software and Affected Versions: Codezips Tourist Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/create-package.php. The manipulation of the packageimage argument leads to...

CVE-2024-9814: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Codezips Pharmacy Management System 1.0. Affected is an unknown function of the file product/update.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-9794: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in Codezips Online Shopping Portal 1.0. This issue affects some unknown processing of the file /update-image1.php. The manipulation of the argument productimage1 leads to unrestricted upload. The attack may be initiated remotely. T...

CVE-2024-9815: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/create-package.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack can be...

CVE-2024-9816: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/change-image.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack may be launched remotely...

CVE-2024-9460

A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2024-9460

A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2024-9460 Codezips Online Shopping Portal index.php sql injection

A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2024-9460 Codezips Online Shopping Portal index.php sql injection

A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2024-9460

CVE-2024-9460 affects Codezips Online Shopping Portal 1.0. an SQL injection via the username argument in an unknown function of index.php is reported, with remote exploitation and public disclosure. Multiple sources confirm the risk is due to improper handling of the username parameter leading to...

CVE-2024-9460: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

PT-2024-39648 · Unknown · Codezips Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Codezips Online Shopping Portal version 1.0 Description: A critical issue has been found in the software, allowing for SQL injection through the manipulation of the username argument in an unknown function of the file index.php. This can be...

Codezips Online Shopping Portal SQL注入漏洞

Codezips Online Shopping Portal is a Codezips open source online store system. A SQL injection vulnerability exists in Codezips Online Shopping Portal version 1.0, which stems from an incorrect operation of the username parameter that can lead to sql injection...