CVE-2024-42770

A Stored Cross Site Scripting XSS vulnerability was found in "/core/signupuser.php" of Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via the "useremail" parameter...

CVE-2024-42770

A Stored Cross Site Scripting XSS vulnerability was found in "/core/signupuser.php" of Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via the "useremail" parameter...

CVE-2024-42770

A Stored Cross Site Scripting XSS vulnerability was found in "/core/signupuser.php" of Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via the "useremail" parameter...

SourceCodester E-Commerce System SQL注入漏洞

SourceCodester E-Commerce System is an e-commerce system from SourceCodester Inc. SourceCodester E-Commerce System version 1.0 suffers from a SQL injection vulnerability in the useremail parameter of /ecommerce/admin/login.php of the component Admin Login page...

CVE-2024-42762

A Stored Cross Site Scripting XSS vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the Name, Phone, and Email parameter fields...

PT-2024-30141 · Unknown · Kashipara Hotel Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Hotel Management System version 1.0 Description: A Stored Cross Site Scripting XSS issue was found in the "/core/signup user.php" endpoint, allowing remote attackers to execute arbitrary code via the user email parameter...

CVE-2024-42762

A Stored Cross Site Scripting XSS vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the Name, Phone, and Email parameter fields...

CVE-2024-42781

A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the email parameter...

CVE-2024-42781

A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the email parameter...

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. Kashipara Music Management System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the email parameter of /music/ajax.php?action=login against external SQL input, which c...

CVE-2024-42781

Kashipara Music Management System v1.0 suffers from a SQL injection in /music/ajax.php?action=login via the email parameter, enabling remote attackers to execute arbitrary SQL and bypass login. Documented details indicate a high-severity issue with potential data exposure and authentication bypas...

SourceCodester Point of Sales and Inventory Management System SQL注入漏洞

SourceCodester Point of Sales and Inventory Management System is a point of sale and inventory management system from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Point of Sales and Inventory Management System version 1.0, which originates from a SQL injection...

CVE-2024-7808

A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown function of the file logindbc.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

code-projects Job Portal 安全漏洞

Code-Projects Job Portal is Code-Projects open source PHP-based job search website system. A security vulnerability exists in code-projects Job Portal version 1.0, which is caused by an SQL injection vulnerability in the email parameter of the logindbc.php page...

PT-2024-38595 · Unknown · Code-Projects Job Portal

Name of the Vulnerable Software and Affected Versions: code-projects Job Portal version 1.0 Description: A critical issue was found in the logindbc.php file, where an unknown function is affected. The manipulation of the email argument leads to SQL injection. It is possible to launch the attack...

CVE-2024-40477

A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "email" parameter...

CVE-2024-40477

A SQL injection vulnerability in "/oahms/admin/forgot-password.php" in PHPGurukul Old Age Home Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "email" parameter...

CVE-2024-40478

A Stored Cross Site Scripting XSS vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam System v1.0, which allows remote attackers to execute arbitrary code via "rname" and "email" parameter fields...

Online Polling SQL注入漏洞

Online Polling is an online polling system for Fabian Ros individual developers. A SQL injection vulnerability exists in Online Polling version 1.0, which is caused by an SQL injection vulnerability in the email parameter of the registration component of the registeracc.php file...

PHPGurukul Old Age Home Management System 安全漏洞

PHPGurukul Old Age Home Management System is a nursing home management system from PHPGurukul, Inc. A security vulnerability exists in PHPGurukul Old Age Home Management System v1.0, which originates from an SQL injection vulnerability in the email parameter of the /oahms/admin/forgot-password.ph...