PT-2024-24128 · Unknown · Bdtask Multi-Store Inventory Management System

Name of the Vulnerable Software and Affected Versions: Bdtask Multi-Store Inventory Management System up to 20240325 Description: A vulnerability was found in the Bdtask Multi-Store Inventory Management System, affecting an unknown function of the file /stockmovment/stockmovment/delete/ of the...

Anchor 安全漏洞

Anchor is an open source lightweight blogging system. A security vulnerability exists in Anchor version v0.12.7, which stems from a cross-site request forgery CSRF in /anchor/admin/categories/delete/2...

CVE-2024-2568

A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/divdata/delete?divId=9 of the component Custom Data Page. The manipulation leads to sql injection. The attack can be launched remotel...

CVE-2024-28431

DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/catalogdel.php...

PT-2024-22432 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the /dede/catalog del.php component. This allows for malicious requests to be made without the user's knowledge or consent. Recommendations: For DedeCMS...

PT-2024-18859 · Unknown · Bdtask Hospita Automanager

Name of the Vulnerable Software and Affected Versions: Bdtask Hospita AutoManager up to 20240223 Description: A vulnerability has been found in the Investigation Report Handler component, affecting unknown code of the file "/investigation/delete/". This issue leads to cross-site request forgery a...

PT-2024-18692 · Sourcecodester · Sourcecodester Computer Inventory System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Inventory System version 1.0 Description: A critical issue has been identified, affecting the /endpoint/delete-computer.php file. The manipulation of the computer argument leads to SQL injection. This issue can be...

PT-2024-20888 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA versions v2017 through v11.9 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the $AFF ID parameter at the "/affair/delete.php" API endpoint. Recommendations: For Tongda OA versions v2017...

PT-2024-20822 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Managment System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/delete.php" API endpoint. Recommendations: For Employee Managment Syst...

PT-2024-20818 · Unknown · Barangay Population Monitoring System

Name of the Vulnerable Software and Affected Versions: Barangay Population Monitoring System version 1.0 Description: The system contains a SQL injection vulnerability via the resident parameter at the "/endpoint/delete-resident.php" endpoint. This issue allows for potential exploitation...

PT-2024-20820 · Unknown · Simple Expense Tracker

Name of the Vulnerable Software and Affected Versions: Simple Expense Tracker version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the expense parameter at the "/endpoint/delete expense.php" API endpoint. Recommendations: For Simp...

CVE-2024-25310

Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5."...

PT-2024-20881 · Code Projects · Code-Projects Simple School Managment System

Name of the Vulnerable Software and Affected Versions: Code-projects Simple School Managment System version 1.0 Description: The issue allows SQL Injection via the id parameter at the "School/sub delete.php?id=5" endpoint. This could potentially lead to unauthorized access or manipulation of...

PT-2024-20880 · Code Projects · Code-Projects Simple School Managment System

Name of the Vulnerable Software and Affected Versions: Code-projects Simple School Managment System version 1.0 Description: The issue allows SQL Injection via the id parameter at the "School/delete.php?id=5" endpoint. This means an attacker could potentially inject malicious SQL code by...

PT-2023-30874 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS versions prior to 8.5.14 Concrete CMS versions 9 prior to 9.2.3 Description: The issue allows Cross Site Request Forgery CSRF via the "ccm/calendar/dialogs/event/delete/submit" API endpoint. An attacker can force an admin to dele...

PT-2023-30872 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS versions prior to 9.2.3 Description: The issue is related to Cross Site Request Forgery CSRF at the "/ccm/system/dialogs/file/delete/1/submit" API endpoint. This allows for unauthorized actions to be performed. Recommendations: F...

GHSA-765F-3MGX-24PW Cross-Site Request Forgery in JFinalCMS via /admin/friend_link/delete

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/friendlink/delete...

PT-2023-32368 · Sourcecodester · Sourcecodester Task Reminder System

Name of the Vulnerable Software and Affected Versions: SourceCodester Task Reminder System version 1.0 Description: A critical issue affects some unknown functionality of the file classes/Users.php?f=delete. The manipulation of the id argument leads to sql injection. The attack may be launched...

PT-2023-32321 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 up to 11.10 Description: A critical vulnerability was found in the General News component of Tongda OA. The issue affects an unknown function of the file /manage/delete query.php. The manipulation of the NEWS ID argument leads ...

PT-2023-32258 · Tongda · Tongda Oa 2017

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions prior to 11.10 Description: A critical vulnerability has been found in Tongda OA 2017, affecting the file general/hr/training/record/delete.php. The manipulation of the RECORD ID argument leads to sql injection. The...