PHPGurukul Men Salon Management System 安全漏洞

PHPGurukul Men Salon Management System is a men's salon management system from PHPGurukul, Inc. A security vulnerability exists in version v.2.0 of the PHPGurukul Men Salon Management System, which is caused by a SQL injection vulnerability in the email parameter of the index.php component...

CVE-2024-24506

Cross Site Scripting XSS vulnerability in Lime Survey Community Edition Version v.5.3.32+220817, allows remote attackers to execute arbitrary code via the Administrator email address parameter in the General Setting function...

CVE-2024-30998

SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via the email parameter in the index.php component...

PT-2024-23713 · Unknown · Phpgurukul Men Salon Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Men Salon Management System version 2.0 Description: The issue allows remote attackers to execute arbitrary code and obtain sensitive information via the email parameter in the "index.php" component. This enables attackers to acces...

Exploit for SQL Injection in Phpgurukul Men_Salon_Management_System

PHPGurukul Men Salon Management System 2.0 + Welcome to the PH...

WordPress Plugin WP ERP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-15685 · WordPress · Wp Erp

Name of the Vulnerable Software and Affected Versions: The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress versions up to, and including, 1.12.9 Description: The issue is related to union-based SQL Injection via the email parameter...

Complete Online Beauty Parlor Management System /contact-us.php File SQL Injection Vulnerability

Complete Online Beauty Parlor Management System is an online beauty parlor management system. The Complete Online Beauty Parlor Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the email parameter of the...

Complete Online Beauty Parlor Management System /forgot-password.php File SQL Injection Vulnerability

Complete Online Beauty Parlor Management System is an online beauty parlor management system. The Complete Online Beauty Parlor Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the email parameter of the...

Campcodes Online Shopping System 跨站脚本漏洞

Campcodes Online Shopping System is an online shopping system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Online Shopping System, which stems from an incorrect manipulation of the parameter email that can lead to cross-site scripting...

CVE-2024-2767

A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be initiated...

Campcodes Complete Online Beauty Parlor Management System 安全漏洞

Campcodes Complete Online Beauty Parlor Management System is an online beauty parlor management system from Campcodes, Inc. A security vulnerability exists in Campcodes Complete Online Beauty Parlor Management System version 1.0, which originates from an SQL injection vulnerability in the email...

PT-2024-21985 · Unknown · Campcodes Complete Online Beauty Parlor Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Online Beauty Parlor Management System version 1.0 Description: A critical issue affects the processing of the file "/admin/forgot-password.php". The manipulation of the email argument leads to SQL injection. The attack can...

Campcodes Complete Online DJ Booking System 跨站脚本漏洞

Campcodes Complete Online DJ Booking System is an online DJ booking system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Online DJ Booking System, which stems from a cross-site scripting vulnerability in the email parameter of the...

The vulnerability in the apply.cgi interface of TRENDnet’s TEW-827DRU router software allows a hacker to elevate their privileges to the root user level.

The vulnerability of the apply.cgi interface of TRENDnet TEW-827DRU router microprogramming system is related to the lack of measures taken to neutralize special elements used in the OS command. Exploiting this vulnerability can allow a malicious actor to elevate their privileges to root user...

Online-College-Event-Hall-Reservation-System SQL Injection Vulnerability

Online-College-Event-Hall-Reservation-System is an online college event hall reservation system by Magesh K individual developer. Designed to automate the hall booking process to eliminate manual logging and increase efficiency. Online-College-Event-Hall-Reservation-System suffers from a SQL...

Customer Support System Cross-Site Scripting Vulnerability (CNVD-2024-14026)

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a cross-site scripting vulnerability that stems fro...

Code injection

An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter...

CVE-2024-25501

An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter...

CVE-2024-25501

CVE-2024-25501 concerns WinMail (versions 7.1, 5.1, and earlier). The vulnerability allows a remote attacker to execute arbitrary code by sending a crafted script to the email parameter. The impact is described as high confidentiality, integrity, and availability risks (per CVSS 3.1 metrics: AV:N...