CVE-2024-37848

SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to execute arbitrary code via the admindelete.php component...

CVE-2022-28006

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employeedelete.php...

PT-2024-36535 · Unknown · Codeastro Complaint Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Complaint Management System version 1.0 Description: The issue allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the "delete.php" component. This is a result of a SQL injection...

ROS-20240627-06

A vulnerability in the Calendar component of cloud storage creation and utilization software Nextcloud Server is related to improper access control. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to sensitive information Vulnerability in the 2FA component...

CVE-2024-37848

SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to execute arbitrary code via the admindelete.php component...

Online Book Store Security Breach

Online Book Store is an online bookstore by the individual developer Arvin Arandilla. A security vulnerability exists in Online Book Store v1.0, which originates from a SQL injection vulnerability that allows local attackers to execute arbitrary code via the admindelete.php component...

PT-2024-27782 · Unknown · Online-Bookstore-Project-In-Php

Name of the Vulnerable Software and Affected Versions: Online-Bookstore-Project-In-PHP version 1.0 Description: The issue allows a local attacker to execute arbitrary code via the admin delete.php component. This is due to a SQL Injection vulnerability. Recommendations: For...

CVE-2024-37848

SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 allows a local attacker to execute arbitrary code via the admindelete.php component...

CVE-2024-37848

CVE-2024-37848 corresponds to a SQL Injection vulnerability in Online-Bookstore-Project-In-PHP v1.0 that allows a local attacker to execute arbitrary code via admin_delete.php. Affected component is admin_delete.php; root cause is SQL injection leading to full impact (confidentiality, integrity, ...

PT-2023-9524 · Openlink +4 · Virtuoso-Opensource +4

Name of the Vulnerable Software and Affected Versions: openlink virtuoso-opensource version 7.2.9 Description: The issue is related to the dk set delete component of the Virtuoso-opensource platform, which is associated with the incorrect neutralization of special elements used in SQL commands...

CVE-2022-28010

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtimedelete.php...