CVE-2024-4807 Kashipara College Management System delete_user.php sql injection

A vulnerability, which was classified as critical, has been found in Kashipara College Management System 1.0. This issue affects some unknown processing of the file deleteuser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2023-27052

The CVE-2023-27052 issue affects E-Commerce System v1.0 and is a SQL injection vulnerability exploitable via the id parameter in /admin/delete_user.php. The NVD/CVE data assign CVSS 3.1 base score 9.8 (CRITICAL) with network access, no authentication, no user interaction, and impact to confidenti...

CVE-2023-27052: Improper Neutralization of Special Elements used in an SQL Command

E-Commerce System v1.0 ws discovered to contain a SQL injection vulnerability via the id parameter at /admin/deleteuser.php...

Design/Logic Flaw

A vulnerability classified as problematic has been found in SourceCodester Gym Management System. Affected is an unknown function of the file deleteuser.php. The manipulation of the argument deleteuser leads to denial of service. It is possible to launch the attack remotely. The identifier of thi...

CVE-2022-2776 SourceCodester Gym Management System delete_user.php denial of service

A vulnerability classified as problematic has been found in SourceCodester Gym Management System. Affected is an unknown function of the file deleteuser.php. The manipulation of the argument deleteuser leads to denial of service. It is possible to launch the attack remotely. The identifier of thi...

CVE-2022-2776

The CVE-2022-2776 entry concerns SourceCodester Gym Management System. The vulnerability is in an unknown function within delete_user.php where manipulation of the delete_user argument leads to a denial of service. It can be launched remotely. Connected sources corroborate the impact as DoS and i...

CVE-2022-2776: Improper Resource Shutdown or Release

A vulnerability classified as problematic has been found in SourceCodester Gym Management System. Affected is an unknown function of the file deleteuser.php. The manipulation of the argument deleteuser leads to denial of service. It is possible to launch the attack remotely. The identifier of thi...

CVE-2018-9162

Contec Smart Home 4.15 devices do not require authentication for newuser.php, edituser.php, deleteuser.php, and user.php, as demonstrated by changing the admin password and then obtaining control over doors...

CVE-2018-9162: Missing Authentication for Critical Function

Contec Smart Home 4.15 devices do not require authentication for newuser.php, edituser.php, deleteuser.php, and user.php, as demonstrated by changing the admin password and then obtaining control over doors...

CVE-2013-2778: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in addressbook/register/deleteuser.php in PHP Address Book 8.2.5 allows remote attackers to hijack the authentication of administrators for requests that delete accounts, a different vulnerability than CVE-2013-0135.1...