Online Admission System Code Issue Vulnerability

Online Admission System is an online admission system developed by RASHMI KUMARI, an individual developer. A code issue exists in Project Worlds Online Admission System version 1.0, which stems from an unrestricted file upload due to some unknown processing in Documents.php...

PT-2024-15816 · Unknown · Projectworlds Online Admission System

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Admission System version 1.0 Description: A critical issue affects the processing of the file documents.php, leading to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2024-0783: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Project Worlds Online Admission System 1.0 and classified as critical. This issue affects some unknown processing of the file documents.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the publ...

PT-2022-12425

Name of the Vulnerable Software and Affected Versions The Online Admission System version 1.0 Description The issue allows an unauthenticated attacker to upload or transfer files of dangerous types to the application through the "documents.php" endpoint, which may be used to execute malicious cod...

CVE-2021-45835: Unrestricted Upload of File with Dangerous Type

The Online Admission System 1.0 allows an unauthenticated attacker to upload or transfer files of dangerous types to the application through documents.php, which may be used to execute malicious code or lead to code execution...

Online Admission System 代码问题漏洞

Online Admission System is an online admission system by the individual developer RASHMI KUMARI. A security vulnerability exists in Online Admission System due to a missing file upload type restriction in the documents.php file of the application. An unauthenticated attacker can upload dangerous...

Sql injection

SQL injection vulnerability in scripts/documents.php in Jadu Galaxies allows remote attackers to execute arbitrary SQL commands via the categoryID parameter...

CVE-2008-6254

CVE-2008-6254 is a SQL injection vulnerability in the Jadu Galaxies web application, specifically in scripts/documents.php. An attacker can modify the categoryID parameter to execute arbitrary SQL commands on the backend database. This aligns with the NVD entry showing a CVSSv2 base score of 7.5 ...

CVE-2008-6254: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in scripts/documents.php in Jadu Galaxies allows remote attackers to execute arbitrary SQL commands via the categoryID parameter...

jadugalaxies-sql.txt

powered by Jadu® Galaxies blind sql inj documents.php categoryID blind sql inj ---------------------------------------------------------- Discovered By: ZoRLu Date: 17.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : my bug number...

Jadu Galaxies (categoryID) Blind SQL Injection Vulnerability

No description provided by source. powered by Jadu® Galaxies blind sql inj documents.php categoryID blind sql inj ---------------------------------------------------------- Discovered By: ZoRLu Date: 17.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi...

Jadu Galaxies - 'categoryId' Blind SQL Injection

powered by Jadu® Galaxies blind sql inj documents.php categoryID blind sql inj ---------------------------------------------------------- Discovered By: ZoRLu Date: 17.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : my bug numbe...