CVE-2024-12948: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Travel Management System 1.0. It has been classified as critical. This affects an unknown part of the file /detail.php. The manipulation of the argument pid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

PT-2024-36466

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Birth Certificate System version 1.0 Description An insecure direct object reference IDOR vulnerability was discovered in the PHPGurukul Online Birth Certificate System. This issue resides in the viewid parameter of...

CVE-2024-55058: Use of Incorrectly-Resolved Name or Reference

An insecure direct object reference IDOR vulnerability was discovered in PHPGurukul Online Birth Certificate System v1.0. This vulnerability resides in the viewid parameter of /user/view-application-detail.php. Authenticated users can exploit this flaw by manipulating the viewid parameter in the...

PT-2024-35731

Name of the Vulnerable Software and Affected Versions PHPGURUKUL Vehicle Parking Management System version 1.13 Description A SQL injection issue was found in the /users/view-detail.php endpoint, specifically affecting the viewid parameter. Improper input sanitization allows attackers to inject...

CVE-2024-53364: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability was found in PHPGURUKUL Vehicle Parking Management System v1.13 in /users/view-detail.php. This vulnerability affects the viewid parameter, where improper input sanitization allows attackers to inject malicious SQL queries...

CVE-2024-10989: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects E-Health Care System 1.0. This affects an unknown part of the file /Admin/detail.php. The manipulation of the argument sid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

PT-2024-16586

Name of the Vulnerable Software and Affected Versions 1000 Projects Bookstore Management System version 1.0 Description A critical issue has been found in the 1000 Projects Bookstore Management System, affecting unknown code in the file book detail.php. The manipulation of the id argument leads t...

PT-2024-16566

Name of the Vulnerable Software and Affected Versions code-projects E-Health Care System version 1.0 Description A critical vulnerability has been found in the code-projects E-Health Care System, affecting the file Admin/req detail.php. The manipulation of the id argument leads to SQL injection...

PT-2024-16504

Name of the Vulnerable Software and Affected Versions E-Health Care System version 1.0 Description A critical issue was found in the E-Health Care System, affecting an unknown part of the file /Admin/consulting detail.php. The manipulation of the consulting id argument leads to SQL injection. It ...

CVE-2024-51066

An Insecure Direct Object Reference IDOR vulnerability in appointment-detail.php in Phpgurukul's Beauty Parlour Management System v1.1 allows unauthorized access to the Personally Identifiable Information PII of other customers...

CVE-2024-51066: Authorization Bypass Through User-Controlled Key

An Insecure Direct Object Reference IDOR vulnerability in appointment-detail.php in Phpgurukul's Beauty Parlour Management System v1.1 allows unauthorized access to the Personally Identifiable Information PII of other customers...

CVE-2024-51066

An Insecure Direct Object Reference IDOR vulnerability in appointment-detail.php in Phpgurukul's Beauty Parlour Management System v1.1 allows unauthorized access to the Personally Identifiable Information PII of other customers...

PT-2024-16171

Name of the Vulnerable Software and Affected Versions PHPGurukul Medical Card Generation System version 1.0 Description A critical issue was found in the Managecard View Detail Page component, specifically in the /admin/view-card-detail.php file. The viewid argument is vulnerable to sql injection...

CVE-2024-10299: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Medical Card Generation System 1.0. This vulnerability affects unknown code of the file /admin/view-card-detail.php of the component Managecard View Detail Page. The manipulation of the argument viewid leads to sql injection. The atta...

Medical Card Generations System 1.0 SQL Injection

==================================================================================================================================== | Title : Medical Card Generations System 1.0 Sql injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0....

PT-2024-29417

Name of the Vulnerable Software and Affected Versions AMTT Hotel Broadband Operation System HiBOS versions 3.0.3.151204 and before Description The issue is related to SQL Injection via the /manager/card/card detail.php endpoint. This allows for potential unauthorized access and manipulation of...

CVE-2024-6042

A vulnerability was found in itsourcecode Real Estate Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file property-detail.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

CVE-2024-6042: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Real Estate Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file property-detail.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

CVE-2024-4815

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240506. Affected by this issue is some unknown functionality of the file /view/bugSolve/viewData/detail.php. The manipulation of the argument filename leads to os command injection. The attack may be launch...

CVE-2024-4815: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240506. Affected by this issue is some unknown functionality of the file /view/bugSolve/viewData/detail.php. The manipulation of the argument filename leads to os command injection. The attack may be launch...