MAL-2024-1286 Malicious code in djs-status (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63cea4fbbb1333188e78d11622c9b943608aea6770144dacf6e1184036a646b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in djs-embeds-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86831222f9b0a818e862c2db4a2e7f56259e7bae31f417c9464d2c19cb67dadb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1285 Malicious code in djs-embeds-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86831222f9b0a818e862c2db4a2e7f56259e7bae31f417c9464d2c19cb67dadb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1290 Malicious code in samplenodejsservice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90d2e2f79b4c5000c976cd4c1e99d091bb46b7dbee831bff50b3c69ff36e7dbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1288 Malicious code in lambda-iss-location (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d7bd1b87c4b816789f583c6667d202f613eab5d352c1fcbe90fe1b182a0d13c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1294 Malicious code in tari-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6da5a4c9da80939fd8b4009200d8e59514e1d3a5664d9b7150b27f40250a584d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1282 Malicious code in blockchain-explorer-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cdabf6ac5434305cb152ee0eaf4d9cbac6f1de324ae91052537dc8fcfa94410 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-31545

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manageuser&id=6...

Computer Laboratory Management System 安全漏洞

Computer Laboratory Management System is a computer laboratory management system. A security vulnerability exists in Computer Laboratory Management System v1.0, which originates from a SQL injection vulnerability in the parameter id of the component /admin/...

CVE-2024-31545

CVE-2024-31545 affects Computer Laboratory Management System v1.0 and is caused by a vulnerable SQL path in the admin interface: the endpoint "/admin/?page=user/manage_user&id=6" can be exploited via the id parameter to perform SQL Injection. The CVSS 3.1 base score is 9.4 (CRITICAL) with network...

CVE-2024-31545

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/?page=user/manageuser&id=6...

CVE-2024-31546

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/damage/viewdamage.php...

CVE-2024-31547

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/item/viewitem.php...

Malicious code in djs-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3dcc117202e21ae1b180b5f80af9dc0a1c0082aee807792f2aeb5b62c8e647d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-31546

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/damage/viewdamage.php...

CVE-2024-31547

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/item/viewitem.php...

CVE-2024-31547

Computer Laboratory Management System v1.0 is affected by a SQL Injection in the id parameter of /admin/item/view_item.php. The vulnerability arises in the application’s input handling for that endpoint, enabling an attacker to manipulate a SQL query and potentially exfiltrate data or impact inte...

CVE-2024-31546

Computer Laboratory Management System v1.0 is vulnerable to SQL Injection via the "id" parameter of /admin/damage/viewdamage.php...

PT-2024-24134 · Unknown · Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: Computer Laboratory Management System version 1.0 Description: The issue concerns SQL Injection via the id parameter of the "/admin/damage/view damage.php" API endpoint. Recommendations: For Computer Laboratory Management System version 1.0,...

CVE-2024-31546

CVE-2024-31546 affects Computer Laboratory Management System v1.0. The vulnerability is a SQL Injection in the /admin/damage/view_damage.php endpoint via the id parameter, caused by unsafe handling of input in a user-controlled query. The CVSS 3.1 metrics indicate a critical impact: HIGH confiden...