25 matches found
CVE-2024-30989
Cross Site Scripting vulnerability in /edit-client-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code via the "cname", "comname", "state" and "city" parameter...
CVE-2024-9328
A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /control/editclient.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...
CVE-2022-38610
Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editclient.php...
Farmacia 注入漏洞
Farmacia is a content management system from code-projects. An injection vulnerability exists in code-projects Farmacia version 1.0, which stems from an SQL injection vulnerability contained in the id parameter of the /editar-cliente.php file...
PT-2024-39577 · Sourcecodester · Sourcecodester Advocate Office Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Advocate Office Management System version 1.0 Description: A critical issue affects the processing of the file /control/edit client.php, where the manipulation of the id argument leads to SQL injection. The attack can be...
Advocate Office Management System SQL注入漏洞
Advocate Office Management System is an office management system by Mayuri K. Individual Developer. A SQL injection vulnerability exists in Advocate Office Management System version 1.0, which originates from an SQL injection vulnerability in the id parameter of the /control/editclient.php page...
CVE-2024-8208
A vulnerability has been found in nafisulbari/itsourcecode Insurance Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file editClient.php. The manipulation of the argument AGENT ID leads to cross site scripting. The attack can ...
CVE-2024-36569
Sourcecodester Gas Agency Management System v1.0 is vulnerable to arbitrary code execution via editClientImage.php...
PT-2024-27071 · Sourcecodester · Sourcecodester Garage Management System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Gas Agency Management System version 1.0 Description: The issue allows for arbitrary code execution via the editClientImage.php file. This could potentially lead to unauthorized access and control of the system. Recommendations...
CVE-2024-30989
Cross Site Scripting vulnerability in /edit-client-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code via the "cname", "comname", "state" and "city" parameter...
CVE-2024-30989
CVE-2024-30989 affects the phpgurukul Client Management System (PHP & MySQL 1.1). A cross-site scripting vulnerability exists in /edit-client-details.php that allows attackers to execute arbitrary code through the cname, comname, state, and city parameters. The connected documents do not specify ...
CVE-2022-46678
Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general client policy for which the user is not authorized...
CVE-2022-46755
Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general client policy for which the user is not authorized...
Online Diagnostic Lab Management System SQL Injection Vulnerability (CNVD-2022-68287)
Online Diagnostic Lab Management System is an online diagnostic lab management system. SQL injection vulnerability exists in Online Diagnostic Lab Management System v1.0, which originates from the /diagnostic/editclient.php The id parameter in /diagnostic/editclient.php is vulnerable to SQL...
CVE-2022-42073
Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=...
PT-2022-26235 · Unknown · Online Diagnostic Lab Management System
Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue concerns SQL Injection, which can be exploited via the "/diagnostic/editclient.php?id=" API endpoint. This allows for potential manipulation of database queries by...
CVE-2022-38610
Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editclient.php...
CVE-2022-38610
Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editclient.php...
Church Management System SQL注入漏洞
Church Management System is a church management system. A security vulnerability exists in Church Management System v1.0, which originates from a SQL injection vulnerability in the id parameter via /garage/editclient.php...
CVE-2022-29999
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editClient.php?clientid=...