PT-2024-8663 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A vulnerability was found in Moodle, related to insufficient authentication procedure, which may allow a remote attacker to gain unauthorized access to system elements. The issue requires...

CVE-2024-34831

cross-site scripting XSS vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the imageLink parameter in the librarymanagecatalogeditProcess.php component...

CVE-2024-8427

The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveglobalsettings and processformedit functions in all versions up to, and including, 1.2.2. This makes i...

Exploit for CVE-2024-25503

CVE-2024-25503 Vulnerability type : Cross Site Scripting...

PT-2024-39004 · WordPress · Frontend Post Submission Manager Lite – Frontend Posting Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin versions up to, and including, 1.2.2 Description: The issue allows authenticated attackers with Subscriber-level access and above to update the plugin's settings an...

WordPress plugin Frontend Post Submission Manager Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

CVE-2024-8366

A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /index.php?id=userProfileEdit of the component Update My Profile Page. The manipulation of the argument fname/lname/email with the input alert...

PT-2024-38971 · Code Projects · Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A vulnerability was found in the Update My Profile Page component of the Pharmacy Management System. The issue affects an unknown part of the file /index.php?id=userProfileEdit...

CVE-2024-8344

A vulnerability has been found in Campcodes Supplier Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/editarea.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...

PT-2024-38959 · Unknown · Campcodes Supplier Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Supplier Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/edit area.php. The manipulation of the id argument leads to SQL injection. This...

Campcodes Supplier Management System SQL注入漏洞

Campcodes Supplier Management System is a supplier management system from Campcodes, Inc. A SQL injection vulnerability exists in Campcodes Supplier Management System version 1.0, which stems from a parameter id in the file /admin/editarea.php that can lead to SQL injection...

PT-2024-38929 · Jpress · Jpress

Name of the Vulnerable Software and Affected Versions: jpress versions up to 5.1.1 Description: A critical vulnerability has been found in the Template Module Handler component of jpress, affecting an unknown functionality of the file /admin/template/edit. The manipulation leads to path traversal...

Jpress 路径遍历漏洞

Jpress is a blogging platform developed by Jpress team using Java language. A path traversal vulnerability exists in Jpress version 5.1.1 and earlier versions, which stems from a path traversal vulnerability in /admin/template/edit...

CVE-2024-8216

A vulnerability, which was classified as critical, has been found in nafisulbari/itsourcecode Insurance Management System 1.0. Affected by this issue is some unknown functionality of the file editPayment.php of the component Payment Handler. The manipulation of the argument reciptno leads to...

CVE-2024-8208

A vulnerability has been found in nafisulbari/itsourcecode Insurance Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file editClient.php. The manipulation of the argument AGENT ID leads to cross site scripting. The attack can ...

PT-2024-38875 · Nafisulbari · Insurance Management System

Name of the Vulnerable Software and Affected Versions: nafisulbari/itsourcecode Insurance Management System version 1.0 Description: A critical issue has been found in the Insurance Management System, affecting some unknown functionality of the file editPayment.php of the component Payment Handle...

CVE-2024-8147

A vulnerability was found in code-projects Pharmacy Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php?action=editPharmacist. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-8138

A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. Affected is the function editManager of the file /index.php?action=editManager of the component Parameter Handler. The manipulation of the argument id as part of String leads to sql...

PT-2024-38835 · Code Projects · Code-Projects Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A critical vulnerability has been found in the code-projects Pharmacy Management System. This issue affects the file /index.php?action=editSalesman and is related to the...

Code-Projects Pharmacy Management System SQL注入漏洞

Code-Projects Pharmacy Management System is a Code-Projects open source pharmacy management system. Code-Projects Pharmacy Management System version 1.0 suffers from a SQL injection vulnerability that originates from the parameter id of the file /index.php?action=editSalesman that can lead to SQL...