PT-2024-30074 · Frog Cms · Frog Cms

Name of the Vulnerable Software and Affected Versions: FrogCMS version 0.9.5 Description: A Cross-Site Request Forgery CSRF issue was discovered in FrogCMS. The vulnerability can be exploited via the "/admin/?/page/delete/10" endpoint. Recommendations: For FrogCMS version 0.9.5, as a temporary...

Kamaji 安全漏洞

Kamaji is a Kubernetes control plane manager open-sourced by Clastix Labs. A security vulnerability exists in Kamaji version 1.0.0 and earlier. An attacker exploited the vulnerability to cause certain TCP API servers to be able to read, write, and delete data...

Advocate Office Management System SQL注入漏洞

Advocate Office Management System is an office management system by Mayuri K., a personal developer. A SQL injection vulnerability exists in Advocate Office Management System version 1.0, which is caused by an SQL injection vulnerability in the id parameter of the deleteclient.php file...

SourceCodester Daily Calories Monitoring Tool 安全漏洞

SourceCodester Daily Calories Monitoring Tool is a daily calories monitoring tool from SourceCodester. A security vulnerability exists in the v1.0 version of SourceCodester Daily Calories Monitoring Tool, which stems from an SQL injection vulnerability in the delete-calorie.php page...

PT-2024-29977 · Etcd +2 · Etcd +2

Name of the Vulnerable Software and Affected Versions: Kamaji versions 1.0.0 and earlier Description: The issue arises from Kamaji using an "open at the top" range definition in RBAC for etcd roles, allowing some TCPs API servers to read, write, and delete the data of other control planes. This c...

PT-2024-38496 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A critical issue has been discovered, affecting the delete package function of the Master.php file. The manipulation of the id argument leads to SQL injection. This...

PT-2024-38497 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A critical issue affects the delete enrollment function of the Master.php file. The manipulation of the id argument leads to SQL injection. This issue can be initiat...

PT-2024-38495 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A critical issue was found in the system, affecting the delete users function of the User.php file. The manipulation of the id argument leads to SQL injection. This...

CVE-2024-7643 SourceCodester Leads Manager Tool Delete Leads delete-leads.php sql injection

A vulnerability was found in SourceCodester Leads Manager Tool 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /endpoint/delete-leads.php of the component Delete Leads Handler. The manipulation of the argument leads leads to sql injection. The atta...

CVE-2024-7643

SourceCodester Leads Manager Tool 1.0 contains a SQL injection vulnerability in the Delete Leads Handler, specifically the file /endpoint/delete-leads.php where the leads argument is vulnerable. Exploitation can be remote, and the exploit has been disclosed publicly. Multiple connected sources co...

CVE-2024-7643 SourceCodester Leads Manager Tool Delete Leads delete-leads.php sql injection

A vulnerability was found in SourceCodester Leads Manager Tool 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /endpoint/delete-leads.php of the component Delete Leads Handler. The manipulation of the argument leads leads to sql injection. The atta...

PT-2024-28867 · Unknown · Kashipara Online Exam System

Name of the Vulnerable Software and Affected Versions: Kashipara Online Exam System version 1.0 Description: A Broken Access Control issue was found in "admin/update.php" and "admin/dashboard.php", allowing remote unauthenticated attackers to view the administrator dashboard and delete valid user...

CVE-2024-41332

Incorrect access control in the deletecategory function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with low-level privileges to arbitrarily delete categories...

PT-2024-38471 · Sourcecodester · Sourcecodester Kortex Lite Advocate Office Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A critical issue was found in the system, affecting the delete act.php file. The manipulation of the id argument leads to SQL injection. This issue can be...

CVE-2024-40472

Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php."...

PT-2024-38475 · Sourcecodester · Sourcecodester Leads Manager Tool

Name of the Vulnerable Software and Affected Versions: SourceCodester Leads Manager Tool version 1.0 Description: A critical issue was found in the Delete Leads Handler component, specifically in the file /endpoint/delete-leads.php. The leads argument is vulnerable to SQL injection, which can be...

CVE-2024-41332

Incorrect access control in the deletecategory function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with low-level privileges to arbitrarily delete categories...

PT-2024-38470 · Sourcecodester · Sourcecodester Kortex Lite Advocate Office Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A critical issue has been discovered, affecting the file delete client.php. The manipulation of the id argument leads to SQL injection. This issue can be...

PT-2024-28859 · Sourcecodester · Sourcecodester Daily Calories Monitoring Tool

Name of the Vulnerable Software and Affected Versions: Sourcecodester Daily Calories Monitoring Tool version 1.0 Description: The issue is related to SQL Injection via the "delete-calorie.php" file. This allows for potential data compromise. There is no information provided about the estimated...

CVE-2024-41332

CVE-2024-41332 affects Sourcecodester Computer Laboratory Management System v1.0. The issue is an incorrect access control in the delete_category function that lets authenticated users with low privileges arbitrarily delete categories. Public references indicate a privilege-escalation path via a ...