CVE-2020-37088 School ERP Pro 1.0 - Arbitrary File Read

School ERP Pro 1.0 contains a file disclosure vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the 'document' parameter in download.php. Attackers can access sensitive configuration files by supplying directory traversal paths to retrieve system...

PT-2026-5838

Name of the Vulnerable Software and Affected Versions School ERP Pro version 1.0 Description School ERP Pro version 1.0 has a flaw that allows attackers to read arbitrary files without needing to log in. This is possible by manipulating the document parameter within the 'download.php' file. By...

CVE-2020-36073

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the detail parameter of the document.php page...

CVE-2024-11102

A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /vm/doctor/edit-doc.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched...

CVE-2020-36073

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the detail parameter of the document.php page...

PT-2023-11803 · Unknown · Tailoring Management System

Name of the Vulnerable Software and Affected Versions: Tailor Management System version 1 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via the detail parameter of the "document.php" page. This enables the attacker to potentially access or modify sensitive...

CVE-2022-34002

The CVE-2022-34002 issue affects PDS Vista 7 and concerns a Local File Inclusion vulnerability in the /application/documents/display.aspx endpoint, specifically the document parameter. A low-privileged authenticated attacker could leak configuration files and source code of the web application. A...

PT-2022-21962 · Pds Vista · Pds Vista

Name of the Vulnerable Software and Affected Versions: PDS Vista version 7 Description: The issue concerns a Local File Inclusion vulnerability in the document parameter of the "/application/documents/display.aspx" API endpoint. This allows a low-privileged authenticated attacker to leak...