CVE-2025-12347: Unrestricted Upload of File with Dangerous Type

A flaw has been found in MaxSite CMS up to 109. This issue affects some unknown processing of the file application/maxsite/admin/plugins/editorfiles/save-file-ajax.php. Executing manipulation of the argument filepath/content can lead to unrestricted upload. The attack can be executed remotely. Th...

SQL Injection Vulnerability in Grocery Sales and Inventory System

Grocery Sales and Inventory System is a software solution for grocery sales and inventory management. This system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements when processing parameter IDs in the file/ajax.php. Attackers can exploit this...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38229)

Grocery Sales and Inventory System is a software application for grocery sales and inventory management. The system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID within the file/ajax.php?action=deletesupplier. Attackers...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38232)

Grocery Sales and Inventory System is a system for grocery sales and inventory management. The Grocery Sales and Inventory System has a SQL injection vulnerability, which stems from the lack of validation for external input SQL statements in the parameter ID of the...

Grocery Sales and Inventory System SQL Injection Vulnerability (CNVD-2026-38237)

Grocery Sales and Inventory System is a software application for grocery sales and inventory management. The system has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the parameter ID within the file/ajax.php?action=savesupplier. Attackers ca...

PT-2024-32920 · Campcodes · Campcodes Online Laundry Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Laundry Management System version 1.0 Description: A problem was found in the system, affecting the /ajax.php file. The issue is related to the manipulation of the customer name/username argument, leading to cross-site...

CVE-2024-3719

The CVE-2024-3719 entry pertains to Campcodes House Rental Management System 1.0, with a vulnerability in the ajax.php file where modifying the id parameter enables SQL injection. The affected component is the id parameter in ajax.php; root cause is improper handling of input leading to SQL injec...