11996 matches found
PT-2024-15606 · Code Projects · Code-Projects Fighting Cock Information System
Name of the Vulnerable Software and Affected Versions: code-projects Fighting Cock Information System version 1.0 Description: A critical issue has been identified, affecting the /admin/action/edit chicken.php file. The manipulation of the ref argument leads to SQL injection. This issue can be...
Fighting Cock Information System SQL Injection Vulnerability
Fighting Cock Information System is a chicken information system by chrisjelo individual developer. code-projects Fighting Cock Information System version 1.0 has a SQL injection vulnerability that originates from a SQL injection vulnerability in the file /admin/pages/editchicken.php...
Fighting Cock Information System security breach
Fighting Cock Information System is a chicken information system by chrisjelo individual developer. The code-projects Fighting Cock Information System version 1.0 has a security vulnerability that stems from an SQL injection vulnerability in the /admin/action/editchicken.php file...
CVE-2024-0467
A vulnerability, which was classified as problematic, was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file editpositionquery.php. The manipulation of the argument posname leads to cross site scripting. It is possible to launch the attack...
Employee Profile Management System Cross-Site Scripting Vulnerability
Employee Profile Management System is an employee profile management system by the individual developer Carmelo Garcia. A cross-site scripting vulnerability exists in code-projects Employee Profile Management System version 1.0, which stems from an SQL injection vulnerability in the...
Judging Management System security breach
Judging Management System is a judging management system by Carlo Montero Personal Developer. A security vulnerability exists in Sourcecodester Judging Management System v1.0, which stems from an SQL injection vulnerability that allows remote attackers to execute arbitrary code and obtain sensiti...
CVE-2020-26628
A Cross-Site Scripting XSS vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to execute arbitrary web scripts or HTML code via a malicious payload appended to a username on the 'Edit Profile" page and triggered by another user visiting the profile...
CVE-2020-26628
A Cross-Site Scripting XSS vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to execute arbitrary web scripts or HTML code via a malicious payload appended to a username on the 'Edit Profile" page and triggered by another user visiting the profile...
Cross site scripting
A Cross-Site Scripting XSS vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to execute arbitrary web scripts or HTML code via a malicious payload appended to a username on the 'Edit Profile" page and triggered by another user visiting the profile...
CVE-2024-0360
A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/edit-doctor-specialization.php. The manipulation of the argument doctorspecilization leads to sql injection. The exploit has been...
Sql injection
A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/edit-doctor-specialization.php. The manipulation of the argument doctorspecilization leads to sql injection. The exploit has been...
CVE-2024-0360
CVE-2024-0360 pertains to PHPGurukul Hospital Management System 1.0. The vulnerability is a SQL injection in the parameter doctorspecilization used by the file admin/edit-doctor-specialization.php. Public disclosure of exploits is noted, with high potential impact (per NVD CVSS v3.1: 9.8, critica...
CVE-2024-0360 PHPGurukul Hospital Management System edit-doctor-specialization.php sql injection
A vulnerability was found in PHPGurukul Hospital Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/edit-doctor-specialization.php. The manipulation of the argument doctorspecilization leads to sql injection. The exploit has been...
Hospital Management System 跨站脚本漏洞
A Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs effectively. A cross-site scripting vulnerability exists in Hospital Management System V4.0, which stems from the application's lack of effective...
CVE-2020-26628
A Cross-Site Scripting XSS vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to execute arbitrary web scripts or HTML code via a malicious payload appended to a username on the 'Edit Profile" page and triggered by another user visiting the profile...
CVE-2020-26628
A Cross-Site Scripting XSS vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to execute arbitrary web scripts or HTML code via a malicious payload appended to a username on the 'Edit Profile" page and triggered by another user visiting the profile...
PHPGurukul Hospital Management System SQL Injection Vulnerability
PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A SQL injection vulnerability exists in PHPGurukul Hospital Management System version 1.0, which originates from a SQL injection vulnerability in the doctorspecilization parameter of the...
CVE-2024-0290
A vulnerability, which was classified as critical, has been found in Kashipara Food Management System 1.0. This issue affects some unknown processing of the file stockedit.php. The manipulation of the argument itemtype leads to sql injection. The attack may be initiated remotely. The exploit has...
PT-2024-14078 · Unknown · Getsimple Cms
Name of the Vulnerable Software and Affected Versions: GetSimple CMS version 3.3.16 Description: A Cross Site Scripting XSS issue exists when using Source Code Mode as a backend user to add articles via the "/admin/edit.php" page. Recommendations: For GetSimple CMS version 3.3.16, consider...
PluXml Blog 5.8.9 Remote Code Execution
Exploit Title: PluXml Blog Version : 5.8.9 - Remote Code Execution Authenticated Date: 2024-1-7 Exploit Author: tmrswrr Category: Webapps Vendor Homepage: https://pluxml.org/ Version : 5.8.9 Tested on: https://www.softaculous.com/apps/cms/PluXml 1 After login Click Static pages Edit Write in...