CVE-2023-1983

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manageproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

CVE-2023-1983 SourceCodester Sales Tracker Management System GET Parameter manage_product.php sql injection

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manageproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

Sql injection

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file /admin/inventory/managestock.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be...

CVE-2023-1969 SourceCodester Online Eyewear Shop GET Parameter manage_stock.php sql injection

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file /admin/inventory/managestock.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be...

CVE-2023-1969

CVE-2023-1969 affects SourceCodester Online Eyewear Shop 1.0. A SQL injection flaw exists in the GET parameter handler for /admin/inventory/manage_stock.php via the id parameter, exploitable remotely without authentication. Documented exploits and public disclosure are noted. Impact on confidenti...

Restaurant Management System 1.0 - SQL Injection Vulnerability

Exploit Title: Restaurant Management System 1.0 - SQL Injection Exploit Author: calfcrusher email protected Vendor Homepage: https://www.sourcecodester.com/users/lewa Software Link: https://www.sourcecodester.com/php/11815/restaurant-management-system.html Version: 1.0 Tested on: Apache 2.4.6, PH...

Sql injection

A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/categories/viewcategory.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. ...

CVE-2023-1908

CVE-2023-1908 affects SourceCodester Simple Mobile Comparison Website 1.0. the vulnerability is in the GET Parameter Handler for the file /admin/categories/view_category.php, where manipulating the argument id leads to SQL injection. This vulnerability can be exploited remotely and has publicly d...

PT-2023-17330 · Unknown · Sourcecodester Simple Mobile Comparison Website

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Mobile Comparison Website version 1.0 Description: A critical issue has been found in the GET Parameter Handler component of the file /admin/categories/view category.php, where the manipulation of the id argument leads t...

Osprey Pump Controller v1.0.1 - Unauthenticated Reflected XSS

Exploit Title: Osprey Pump Controller v1.0.1 - Unauthenticated Reflected XSS Exploit Author: LiquidWorm Vendor: ProPump and Controls, Inc. Product web page: https://www.propumpservice.com | https://www.pumpstationparts.com Affected version: Software Build ID 20211018, Production 10/18/2021 Mirage...

Sql injection

A vulnerability has been found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/transactions/trackshipment.php of the component GET Parameter Handler. The manipulation of the argument id lea...

CVE-2023-1856 SourceCodester Air Cargo Management System GET Parameter track_shipment.php sql injection

A vulnerability has been found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/transactions/trackshipment.php of the component GET Parameter Handler. The manipulation of the argument id lea...

PT-2023-17297 · WordPress · Yourchannel

Name of the Vulnerable Software and Affected Versions: YourChannel plugin for WordPress versions up to, and including, 1.2.3 Description: The issue is related to a missing capability check when clearing the plugin cache via the yrc clear cache GET parameter. This allows unauthenticated attackers ...

Sql injection

A vulnerability has been found in SourceCodester Centralized Covid Vaccination Records System 1.0 and classified as critical. This vulnerability affects unknown code of the file /vaccinated/admin/maintenance/managelocation.php of the component GET Parameter Handler. The manipulation of the argume...

CVE-2023-1827 SourceCodester Centralized Covid Vaccination Records System GET Parameter manage_location.php sql injection

A vulnerability has been found in SourceCodester Centralized Covid Vaccination Records System 1.0 and classified as critical. This vulnerability affects unknown code of the file /vaccinated/admin/maintenance/managelocation.php of the component GET Parameter Handler. The manipulation of the argume...

PT-2023-17266 · Sourcecodester · Centralized Covid Vaccination Records System

Name of the Vulnerable Software and Affected Versions: SourceCodester Centralized Covid Vaccination Records System version 1.0 Description: A critical issue has been found in the GET Parameter Handler component of the file /vaccinated/admin/maintenance/manage location.php. The manipulation of the...

Reflected XSS on Sidekiq through multiples endpoints via GET parameter "period"

Description Reflected XSS attacks, also known as non-persistent attacks, occur when a malicious script is reflected off of a web application to the victim's browser. Proof of Concept There must have been a metrics during the default value of the period parameter. You simply have to set the payloa...

Cross site scripting

A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/products/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input...

CVE-2023-1795 SourceCodester Gadget Works Online Ordering System GET Parameter index.php cross site scripting

A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/products/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input...

CVE-2023-1794

A vulnerability was found in SourceCodester Police Crime Record Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/casedetails.php of the component GET Parameter Handler. The manipulation of the argument id with the input "alert2...