CVE-2026-2720 Hr Press Lite <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Employee Information Exposure

The Hr Press Lite plugin for WordPress is vulnerable to unauthorized access of sensitive employee data due to a missing capability check on the hrp-fetch-employees AJAX action in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with Subscriber-level...

CVE-2024-24099

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update...

CVE-2024-24099

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update...

CVE-2024-24099

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update...

Sql injection

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update...

CVE-2024-24099

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update...

CVE-2024-24099

The Scholars Tracking System version 1.0 , developed by Fabian Ros, is vulnerable to SQL Injection during the Employment Status Information Update process. The root cause is a lack of validation for externally entered SQL statements, which could allow an attacker to execute unauthorized SQL comma...

CVE-2024-24099

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update...

Scholars Tracking System 安全漏洞

Scholars Tracking System is a scholars tracking system by the individual developer Fabian Ros. A SQL injection vulnerability exists in Scholars Tracking System version 1.0, which stems from a lack of validation of externally entered SQL statements when updating employment status information, and...

CVE-2024-24099: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update...

PT-2024-20270 · Unknown · Code-Projects Scholars Tracking System

Name of the Vulnerable Software and Affected Versions: Code-projects Scholars Tracking System version 1.0 Description: The issue is related to SQL Injection under Employment Status Information Update. This allows for potential exploitation of the system's database. Recommendations: For...