CVE-2024-7800 SourceCodester Simple Online Bidding System ajax.php sql injection

A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file /simple-online-bidding-system/bidding/admin/ajax.php?action=deleteproduct. The manipulation of the argument id leads to sql injection. It is possible ...

CVE-2024-7799

SourceCodester Simple Online Bidding System 1.0 contains a vulnerability in the file /simple-online-bidding-system/bidding/admin/users.php that leads to improper authorization. The issue can be exploited remotely and a public exploit has been disclosed. Public remediation status is not confirmed ...

CVE-2024-7753

SourceCodester Clinics Patient Management System 1.0 contains a vulnerability in the /user_images/ path that can be triggered remotely via an unauthorized direct request. The issue affects unknown code in that file, and the exploit has been disclosed publicly. CVSS context in the record indicates...

CVE-2024-7752

The CVE-2024-7752 vulnerability affects SourceCodester Clinics Patient Management System v1.0 in the update_medicine.php component, where manipulation of the medicine_name parameter enables cross-site scripting (XSS). Exploitation is actionable remotely, and public disclosures exist. No product v...

CVE-2024-7751

CVE-2024-7751 corresponds to a SQL injection in SourceCodester Clinics Patient Management System 1.0, caused by manipulation of the hidden_id parameter in the file /update_medicine.php. Connected documents corroborate a remotely launchable vulnerability with publicly disclosed exploit details. Af...

CVE-2024-7750

Concrete details found: CVE-2024-7750 affects SourceCodester Clinics Patient Management System 1.0, vulnerable through /medicines.php via the medicine_name parameter leading to SQL injection. The vulnerability is exploitable remotely and exploits have been disclosed publicly. Root cause is a SQL ...

CVE-2024-7739 yzane vscode-markdown-pdf cross site scripting

A vulnerability, which was classified as problematic, was found in yzane vscode-markdown-pdf 1.5.0. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

CVE-2024-7686

A vulnerability, which was classified as problematic, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part of the file registercase.php. The manipulation of the argument title/description/oppositelawyer leads to cross site scripting. It is...

CVE-2024-7683

A vulnerability classified as problematic has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected is an unknown function of the file addcasestage.php. The manipulation of the argument cname leads to cross site scripting. It is possible to launch the attack...

CVE-2024-7682

A vulnerability was found in code-projects Job Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file rwinat.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the publ...

CVE-2024-7676

A vulnerability was found in Sourcecodester Car Driving School Management System 1.0. It has been classified as critical. Affected is the function savepackage of the file /classes/Master.php?f=savepackage. The manipulation of the argument id leads to sql injection. It is possible to launch the...

CVE-2024-7640

A vulnerability, which was classified as critical, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This issue affects some unknown processing of the file deleteregister.php. The manipulation of the argument caseregisterid leads to sql injection. The attack may ...

CVE-2024-7638

A vulnerability classified as critical has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part of the file deleteclient.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-7615

A vulnerability was found in Tenda FH1206 1.2.0.8. It has been declared as critical. Affected by this vulnerability is the function fromSafeClientFilter/fromSafeMacFilter/fromSafeUrlFilter. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has...

CVE-2024-7676

CVE-2024-7676 affects Sourcecodester Car Driving School Management System 1.0. The vulnerability is a SQL injection in the function save_package (file /classes/Master.php?f=save_package) caused by manipulating the argument id. It can be triggered remotely and has been publicly disclosed. Multiple...

CVE-2024-7505

A vulnerability, which was classified as critical, was found in itsourcecode Bike Delivery System 1.0. Affected is an unknown function of the file contactusaction.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-7466

A vulnerability has been found in PMWeb 7.2.00 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Web Application Firewall. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed t...

CVE-2024-7460 OSWAPP Warehouse Inventory System change_password.php cross-site request forgery

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /changepassword.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The...

CVE-2024-7451

A vulnerability was found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file applynow.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has bee...

CVE-2024-7331

CVE-2024-7331 affects TOTOLINK A3300R (version 17.0.0cu.557_B20221024). The vulnerability resides in UploadCustomModule (function in /cgi-bin/cstecgi.cgi); manipulating the File argument triggers a buffer overflow. Remote exploitation is possible and an exploit has been disclosed publicly. Connec...