CVE-2024-10741

A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file /Users/registration.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2024-10741

A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file /Users/registration.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2024-10741 code-projects E-Health Care System registration.php sql injection

A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file /Users/registration.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2024-10741 code-projects E-Health Care System registration.php sql injection

A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file /Users/registration.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2024-10741

Code-projects E-Health Care System 1.0 contains a SQL injection vulnerability in the registration flow. Specifically, the vulnerable path involves /Users/registration.php and the f_name parameter, which allows an attacker to manipulate SQL queries remotely; the vulnerability is publicly disclosed...

CVE-2024-10740

A vulnerability, which was classified as critical, was found in code-projects E-Health Care System up to 1.0. This affects an unknown part of the file /Admin/consultingdetail.php. The manipulation of the argument consultingid leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-10740 code-projects E-Health Care System consulting_detail.php sql injection

A vulnerability, which was classified as critical, was found in code-projects E-Health Care System up to 1.0. This affects an unknown part of the file /Admin/consultingdetail.php. The manipulation of the argument consultingid leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-10740 code-projects E-Health Care System consulting_detail.php sql injection

A vulnerability, which was classified as critical, was found in code-projects E-Health Care System up to 1.0. This affects an unknown part of the file /Admin/consultingdetail.php. The manipulation of the argument consultingid leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-10740

The CVE-2024-10740 entry affects Code-projects E-Health Care System up to version 1.0, via a vulnerability in /Admin/consulting_detail.php where the consulting_id parameter can be manipulated to cause SQL injection. This enables remote exploitation and is supported by multiple sources (NVD, CVE l...

CVE-2024-10739

A vulnerability, which was classified as critical, has been found in code-projects E-Health Care System 1.0. Affected by this issue is some unknown functionality of the file /Admin/adminlogin.php. The manipulation of the argument email/adminpswd as part of String leads to sql injection. The attac...

CVE-2024-10739

A vulnerability, which was classified as critical, has been found in code-projects E-Health Care System 1.0. Affected by this issue is some unknown functionality of the file /Admin/adminlogin.php. The manipulation of the argument email/adminpswd as part of String leads to sql injection. The attac...

CVE-2024-10739 code-projects E-Health Care System adminlogin.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects E-Health Care System 1.0. Affected by this issue is some unknown functionality of the file /Admin/adminlogin.php. The manipulation of the argument email/adminpswd as part of String leads to sql injection. The attac...

CVE-2024-10739 code-projects E-Health Care System adminlogin.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects E-Health Care System 1.0. Affected by this issue is some unknown functionality of the file /Admin/adminlogin.php. The manipulation of the argument email/adminpswd as part of String leads to sql injection. The attac...

CVE-2024-10739

CVE-2024-10739 affects code-projects E-Health Care System 1.0, specifically the /Admin/adminlogin.php file. The vulnerability arises from manipulation of the email and admin_pswd parameters, enabling SQL injection via a String context. Exploitation is described as possible remotely, with multiple...

Code-Projects E-Health Care System SQL注入漏洞

Code-Projects E-Health Care System is a Code-Projects open source e-health care system. A SQL injection vulnerability exists in Code-Projects E-Health Care System version 1.0, which stems from the parameter email/adminpswd in the file /Admin/adminlogin.php that can lead to SQL injection...

Code-Projects E-Health Care System SQL注入漏洞

Code-Projects E-Health Care System is an e-health care system from Code-Projects open source. A SQL injection vulnerability exists in Code-Projects E-Health Care System version 1.0 and earlier, which stems from the parameter consultingid in the file /Admin/consultingdetail.php that can lead to SQ...

Code-Projects E-Health Care System SQL注入漏洞

Code-Projects E-Health Care System is a Code-Projects open source e-health care system. A SQL injection vulnerability exists in Code-Projects E-Health Care System version 1.0, which stems from the parameter fname in the file /Users/registration.php that can lead to SQL injection...

PT-2024-16505 · Unknown · Code-Projects E-Health Care System

Name of the Vulnerable Software and Affected Versions: code-projects E-Health Care System version 1.0 Description: A critical vulnerability has been found in the code-projects E-Health Care System, affecting the file /Users/registration.php. The manipulation of the argument f name leads to SQL...

WordPress e-shops plugin 1.0.3 - CSRF to Reflected Cross Site Scripting (XSS) vulnerability

CSRF to Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin e-shops versions = 1.0.3...

WordPress e-shops Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software e-shops Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51648 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 41a29a656a44 Credits SOPROBRO Required privilege...