CVE-2024-55509

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component...

CodeAstro Complaint Management System 安全漏洞

CodeAstro Complaint Management System is a complaint management system from CodeAstro. A security vulnerability exists in CodeAstro Complaint Management System version 1.0, which stems from a SQL injection vulnerability that allows remote attackers to execute arbitrary code and elevate privileges...

CVE-2024-55509

The CVE-2024-55509 issue affects CodeAstro Complaint Management System v1.0. A SQL injection in the delete.php component (via the id parameter) allows a remote attacker to execute arbitrary code and escalate privileges. The primary impact described across sources is high/remote-execution with pot...

CVE-2024-55506

An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 version with 0 updates enables an attacker to execute arbitrary code and obtain sensitive information via the delete.php file and modifying the id parameter...

CVE-2024-55506

An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 version with 0 updates enables an attacker to execute arbitrary code and obtain sensitive information via the delete.php file and modifying the id parameter...

CVE-2024-55505

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component...

CVE-2024-55505

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component...

CVE-2024-55505

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component...

CVE-2024-55506

An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 version with 0 updates enables an attacker to execute arbitrary code and obtain sensitive information via the delete.php file and modifying the id parameter...

CVE-2024-55505

The CVE-2024-55505 entry concerns CodeAstro Complaint Management System v1.0. A vulnerability in the mess-view.php component allows a remote attacker to escalate privileges. The issue is repeatedly described across sources as a privilege-escalation in CodeAstro CMS 1.0, with no explicit root-caus...

CVE-2024-55505

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component...

CVE-2024-55506

The provided connected sources confirm CVE-2024-55506 affects CodeAstro’s Complaint Management System v1.0, where an IDOR flaw in delete.php allows an attacker to modify the id parameter and execute arbitrary code, potentially exposing sensitive information. Affected element: the delete.php endpo...

PT-2024-36533 · Unknown · Codeastro Complaint Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Complaint Management System version 1.0 Description: An issue in CodeAstro Complaint Management System allows a remote attacker to escalate privileges via the "mess-view.php" component. Recommendations: For CodeAstro Complaint...

Complaint Management System complaint-search.php file SQL Injection Vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability, which stems from an incorrect manipulation of the parameter search in the file /admin/complaint-search.php that can lead to SQL injection. No details of the...

Complaint Management System subcategory.php File SQL Injection Vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability, which stems from an incorrect manipulation of the parameter category in the file /admin/subcategory.php that can lead to sql injection. No details of the...

CVE-2024-12230

A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/subcategory.php. The manipulation of the argument category leads to sql injection. The attack may be launched...

CVE-2024-12229

A vulnerability classified as critical was found in PHPGurukul Complaint Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/complaint-search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely...

CVE-2024-12229

A vulnerability classified as critical was found in PHPGurukul Complaint Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/complaint-search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely...

CVE-2024-12230 PHPGurukul Complaint Management System subcategory.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/subcategory.php. The manipulation of the argument category leads to sql injection. The attack may be launched...

CVE-2024-12230

CVE-2024-12230 affects PHPGurukul Complaint Management System 1.0. The vulnerability is a SQL injection in the file /admin/subcategory.php, caused by improper manipulation of the category parameter. The issue is exploitable remotely and an exploit has been disclosed publicly. Multiple connected s...