CVE-2024-10810

A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file Doctor/apprequest.php. The manipulation of the argument appid leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2024-10808

A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file Admin/reqdetail.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-10809

A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical. This issue affects some unknown processing of the file /Doctor/chat.php. The manipulation of the argument name/message leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-10808

A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file Admin/reqdetail.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-10809

A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical. This issue affects some unknown processing of the file /Doctor/chat.php. The manipulation of the argument name/message leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-10810 code-projects E-Health Care System app_request.php sql injection

A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file Doctor/apprequest.php. The manipulation of the argument appid leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2024-10810

CVE-2024-10810 affects code-projects E-Health Care System 1.0, with SQL injection via the argument app_id in the Doctor/app_request.php function. The vulnerability is exploitable remotely and exploitation information has been publicly disclosed. Several connected sources corroborate the issue, de...

CVE-2024-10810 code-projects E-Health Care System app_request.php sql injection

A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file Doctor/apprequest.php. The manipulation of the argument appid leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2024-10809 code-projects E-Health Care System chat.php sql injection

A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical. This issue affects some unknown processing of the file /Doctor/chat.php. The manipulation of the argument name/message leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-10809 code-projects E-Health Care System chat.php sql injection

A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical. This issue affects some unknown processing of the file /Doctor/chat.php. The manipulation of the argument name/message leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-10809

CVE-2024-10809 impacts the Code-Projects E-Health Care System v1.0. The vulnerability lies in the web endpoint /Doctor/chat.php, where manipulating the parameters name (and by indication, also message ) enables an SQL injection. This remote-access issue is described across multiple sources (NVD, ...

CVE-2024-10808 code-projects E-Health Care System req_detail.php sql injection

A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file Admin/reqdetail.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-10808 code-projects E-Health Care System req_detail.php sql injection

A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file Admin/reqdetail.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-10808

CVE-2024-10808 pertains to code-projects E-Health Care System 1.0, where the vulnerability exists in the Admin/req_detail.php file. The issue is an SQL injection triggered by manipulating the id parameter, with remote exploitation possible and public disclosure of the exploit. Multiple connected ...

code-projects E-Health Care System 安全漏洞

Code-Projects E-Health Care System is a Code-Projects open source e-health care system. A security vulnerability exists in code-projects E-Health Care System version 1.0, which stems from an SQL injection in the parameter appid...

Code-Projects E-Health Care System 安全漏洞

Code-Projects E-Health Care System is an open source e-health care system from Code-Projects. A security vulnerability exists in code-projects E-Health Care System version 1.0, which originates from an SQL injection in the parameter name/message...

Mastodon 4.1.x < 4.1.14 Multiples Vulnerabilities

According to its self-reported version number, the Mastodon application running on the remote host is prior to 3.5.18 or 4.0.x prior to 4.0.14 or 4.1.x prior to 4.1.14 or 4.2.x prior to 4.2.6. It is, therefore, affected by multiples vulnerabilities : - Destroying OAuth Applications doesn't notify...

Oracle E-Business Suite (October 2024 CPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2024 CPU advisory. - Vulnerability in the Oracle Financials product of Oracle E-Business Suite component: Common Components. Supported versions that are...

Code-Projects E-Health Care System 安全漏洞

Code-Projects E-Health Care System is a Code-Projects open source e-health care system. A security vulnerability exists in Code-Projects E-Health Care System version 1.0, which stems from an SQL injection in the parameter id...

Attackers Abuse DocuSign API to Send Authentic-Looking Invoices At Scale

In a concerning trend, cybercriminals are leveraging DocuSign's APIs to send fake invoices that appear strikingly authentic. Unlike traditional phishing scams that rely on deceptively crafted emails and malicious links, these incidents use genuine DocuSign accounts and templates to impersonate...