CVE-2024-50835

A SQL Injection vulnerability was found in /admin/editstudent.php in KASHIPARA E-learning Management System Project 1.0 via the cys, un, ln, fn, and id parameters...

CVE-2024-50832

A SQL Injection vulnerability was found in /admin/editclass.php in kashipara E-learning Management System Project 1.0 via the classname parameter...

CVE-2024-11213

A vulnerability, which was classified as critical, was found in SourceCodester Best Employee Management System 1.0. This affects an unknown part of the file /admin/editrole.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit...

SourceCodester Best Employee Management System 安全漏洞

SourceCodester Best Employee Management System is a SourceCodester open source employee management system. A security vulnerability exists in SourceCodester Best Employee Management System version 1.0, which originates from an SQL injection vulnerability in the id parameter of the...

PT-2024-34433 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A SQL Injection issue was found in the /admin/edit student.php endpoint via the cys, un, ln, fn, and id parameters. This allows for potential unauthorized access to...

PT-2024-34430 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System Project version 1.0 Description: A SQL Injection issue was found in the /admin/edit class.php file via the class name parameter. This allows for potential exploitation. Recommendations: For kashipara...

PT-2024-30282 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software name or versions are mentioned in the provided descriptions. Description: The issue is related to a possible cross-user media read due to a confused deputy in the EditUserPhotoController. This could lead to local...

CSV Injection

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to CSV Injection via the file /account/profile of the Name field under the "Edit Your Profile" section. An attacker can gain elevated privileges and exfiltrate internal system...

CVE-2024-11102

A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /vm/doctor/edit-doc.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched...

CVE-2024-11102 SourceCodester Hospital Management System edit-doc.php cross site scripting

A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /vm/doctor/edit-doc.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched...

CVE-2024-11102 SourceCodester Hospital Management System edit-doc.php cross site scripting

A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /vm/doctor/edit-doc.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched...

PT-2024-16764 · Sourcecodester · Sourcecodester Hospital Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Hospital Management System version 1.0 Description: A high-severity issue affects the SourceCodester Hospital Management System, where the manipulation of the name argument in the /vm/doctor/edit-doc.php file leads to cross-sit...

CVE-2024-11058

A vulnerability was found in CodeAstro Real Estate Management System up to 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /aboutedit.php of the component About Us Page. The manipulation of the argument id leads to sql injection. The attack can be...

PT-2024-16730

Name of the Vulnerable Software and Affected Versions CodeAstro Real Estate Management System versions up to 1.0 Description A critical issue affects the CodeAstro Real Estate Management System, specifically the /aboutedit.php file of the About Us Page component. The manipulation of the id argume...

CVE-2024-11000

A vulnerability classified as problematic was found in CodeAstro Real Estate Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /aboutedit.php of the component About Us Page. The manipulation of the argument aimage leads to unrestricted upload. The attac...

CVE-2024-10996

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/processcategoryedit.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-10991

A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /editBranchResult.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploi...

Codezips Online Institute Management System 安全漏洞

Codezips Online Institute Management System is an open source online institute management system from Codezips. A security vulnerability exists in Codezips Online Institute Management System version 1.0, which stems from the parameter image in the file /edituser.php that can lead to unrestricted...

Codezips Hospital Appointment System 注入漏洞

Codezips Hospital Appointment System is an open source hospital appointment system from Codezips. An injection vulnerability exists in Codezips Hospital Appointment System version 1.0, which stems from the parameter ID of the file /editBranchResult.php that can cause SQL injection...

1000 Projects Bookstore Management System 注入漏洞

1000 Projects Bookstore Management System is an open source bookstore management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Bookstore Management System version 1.0, which stems from the parameter cat in the file /admin/processcategoryedit.php that can cause SQL...