EUVD-2021-27752

Malicious code in bioql PyPI...

CVE-2024-40393

Online Clinic Management System In PHP With Free Source code v1.0 was discovered to contain a SQL injection vulnerability via the user parameter at login.php...

Online Pizza Ordering System 1.0 Insecure Settings

============================================================================================================================================= | Title : Online Pizza Ordering System v1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla...

PT-2024-28825 · Unknown · Online Clinic Management System In Php With Free Source Code

Name of the Vulnerable Software and Affected Versions: Online Clinic Management System In PHP With Free Source code version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the user parameter at the "login.php" API endpoint...

CVE-2024-40393: Improper Neutralization of Special Elements used in an SQL Command

Online Clinic Management System In PHP With Free Source code v1.0 was discovered to contain a SQL injection vulnerability via the user parameter at login.php...

CVE-2024-40393

Online Clinic Management System In PHP With Free Source code v1.0 was discovered to contain a SQL injection vulnerability via the user parameter at login.php...

Employee Task Management System in PHP/PDO Free Source Code - admin-manage-user.php SQL injection vulnerability

NAME OF AFFECTED PRODUCTS + Employee Task Management System...

CVE-2022-48149

Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-48149: Improper Neutralization of Special Elements used in an SQL Command

Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-48149

CVE-2022-48149 affects the Online Student Admission System in PHP Free Source Code 1.0. The vulnerability is a SQL injection via the username parameter in the login/auth flow. Documented CVSSv3.1 base score 9.8 (CRITICAL) with network attack vector, no privileges required, no user interaction, an...

ChatBot Application With A Suggestion Feature 1.0 SQL Injection

Exploit Title: ChatBot Application with a Suggestion Feature 1.0 - 'id' Blind SQL Injection Date: 05/05/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15316/chatbot-app-suggestion-phpoop-free-source-code.html...

PayPal Free Source Code 访问控制错误漏洞

PayPal Free Source Code is an online registration management system. An access control error vulnerability exists in PayPal Free Source Code, which stems from the product's failure to validate privileges when obtaining PHP and PayPal Free Source 1.0 product code, and can be exploited by an attack...

CVE-2021-40578: Improper Neutralization of Special Elements used in an SQL Command

Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive information and execute arbitrary SQL commands via IDNO parameter...

CVE-2021-40577

CVE-2021-40577 is a stored XSS vulnerability in the Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, affecting the Add-Users page via the Name parameter. The issue arises from storing unsanitized input that is later reflected, enabling a persistent script...

CVE-2021-40577: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 in the Add-Users page via the Name parameter...

CVE-2021-42169: Improper Neutralization of Special Elements used in an SQL Command

The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code by: oretnom23 is vulnerable from remote SQL-Injection-Bypass-Authentication for the admin account. The parameter username from the login form is not protected correctly and there is no security and escaping fr...