EUVD-2023-58831

Malicious code in bioql PyPI...

CVE-2024-10448: Cross-Site Request Forgery (CSRF)

A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank Management System 1.0. Affected by this issue is some unknown functionality of the file /file/delete.php. The manipulation of the argument bid leads to cross-site request forgery. The attack may be...

CVE-2024-10417: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /file/delete.php. The manipulation of the argument bid leads to sql injection. It is possible to launch the attack remotely. The exploit has...

PT-2023-32712 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions up to 11.9 Description: A critical issue was found in some unknown functionality of the file general/notify/manage/delete.php. The manipulation of the DELETE STR argument leads to sql injection. The issue has been...