7 matches found
tailoring management system Driverprofile.php SQL Injection
The vulnerability of the driverprofile.php file in the tailoring management system’s control system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary SQL code through the driveri...
CVE-2024-6193
A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. This issue affects some unknown processing of the file driverprofile.php. The manipulation of the argument driverid leads to sql injection. The attack may be initiated remotely. The...
Vehicle Management System SQL Injection Vulnerability
Vehicle Management System is a vehicle management system by Warren Daloyan, an individual developer. A SQL injection vulnerability exists in Vehicle Management System version 1.0, which stems from the inclusion of some unknown functions in driverprofile.php that cause SQL injection via the driver...
CVE-2024-6193: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. This issue affects some unknown processing of the file driverprofile.php. The manipulation of the argument driverid leads to sql injection. The attack may be initiated remotely. The...
PT-2024-4407 · Unknown · Vehicle Management System
Name of the Vulnerable Software and Affected Versions: Vehicle Management System version 1.0 Description: The issue is related to the lack of protection against SQL query structure exploitation in the driverprofile.php file. This allows a remote attacker to execute arbitrary SQL code through the...
driverID can make same userID registered under different different driverID's leading to loss of funds and ultimately the trust of people.
Lines of code Vulnerability details Impact driverID can make same userID registered under different different driverID's leading to loss of funds and ultimately the trust of people. Proof of Concept In contract dripsHub their is no mechanism to check a user already registered under driverID or no...
