12 matches found
CVE-2024-37848
SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to execute arbitrary code via the admindelete.php component...
CVE-2022-28006
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employeedelete.php...
PT-2024-36535 · Unknown · Codeastro Complaint Management System
Name of the Vulnerable Software and Affected Versions: CodeAstro Complaint Management System version 1.0 Description: The issue allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the "delete.php" component. This is a result of a SQL injection...
The vulnerability of the Delete component in the cloud software for creating and using Nextcloud Server’s data storage allows a attacker to cause a service failure.
The vulnerability of the “Delete” component in the cloud software for creating and using data storage for Nextcloud Server is related to lack of access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...
ROS-20240627-06
A vulnerability in the Calendar component of cloud storage creation and utilization software Nextcloud Server is related to improper access control. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to sensitive information Vulnerability in the 2FA component...
CVE-2024-37848
SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to execute arbitrary code via the admindelete.php component...
CVE-2024-37848
SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to execute arbitrary code via the admindelete.php component...
CVE-2024-37848
A SQL Injection vulnerability exists in Online-Bookstore-Project-In-PHP v1.0 . The flaw is located within the admin_delete.php component, which allows a local attacker to achieve arbitrary code execution . To mitigate this risk, it is recommended to disable the admin_delete.php component until a ...
PT-2024-27782
Name of the Vulnerable Software and Affected Versions Online-Bookstore-Project-In-PHP version 1.0 Description The issue allows a local attacker to execute arbitrary code via the admin delete.php component. This is due to a SQL Injection vulnerability. Recommendations For...
Online Book Store Security Breach
Online Book Store is an online bookstore by the individual developer Arvin Arandilla. A security vulnerability exists in Online Book Store v1.0, which originates from a SQL injection vulnerability that allows local attackers to execute arbitrary code via the admindelete.php component...
PT-2023-9524 · Openlink +4 · Virtuoso-Opensource +4
Name of the Vulnerable Software and Affected Versions: openlink virtuoso-opensource version 7.2.9 Description: The issue is related to the dk set delete component of the Virtuoso-opensource platform, which is associated with the incorrect neutralization of special elements used in SQL commands...
