Sql injection

A vulnerability was found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/transactions/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

CVE-2023-1564 SourceCodester Air Cargo Management System GET Parameter update_status.php sql injection

A vulnerability was found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/transactions/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

PT-2023-21886 · WordPress · Meta Data/Taxonomies Filter

Name of the Vulnerable Software and Affected Versions: Meta Data and Taxonomies Filter WordPress plugin versions prior to 1.3.1 Description: The issue is a reflected cross-site scripting vulnerability in the tax name parameter of the mdf get tax options in widget action. This can only be triggere...

PT-2023-10275 · Unknown · Zarthus Irc Twitter Announcer Bot

Name of the Vulnerable Software and Affected Versions: Zarthus IRC Twitter Announcer Bot versions up to 1.1.0 Description: A critical issue was found in the Zarthus IRC Twitter Announcer Bot, affecting the get tweets function of the file lib/twitterbot/plugins/twitter announcer.rb. The manipulati...

Zarthus IRC Twitter Announcer Bot 命令注入漏洞

IRC Twitter Announcer Bot is a bot that posts recent tweets to the channel by Jos Ahrens personal developer. A command injection vulnerability exists in Zarthus IRC Twitter Announcer Bot version 1.1.0 and earlier, which stems from a problem with the function gettweets in the file...

Cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file /bsenordering/index.php of the component GET Parameter Handler. The manipulation of the argument category with the input alert222 leads to...

CVE-2023-1474

A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file users/questionpapers/managequestionpaper.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

Sql injection

A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file users/questionpapers/managequestionpaper.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

CVE-2023-1474 SourceCodester Automatic Question Paper Generator System GET Parameter manage_question_paper.php sql injection

A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file users/questionpapers/managequestionpaper.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

CVE-2023-1474 SourceCodester Automatic Question Paper Generator System GET Parameter manage_question_paper.php sql injection

A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file users/questionpapers/managequestionpaper.php of the component GET Parameter Handler. The manipulation of the argument id leads to s...

CVE-2023-1439

A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracker System 1.0. This issue affects some unknown processing of the file medicines/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument GET leads to sql injection. Th...

Sql injection

A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/courses/viewcourse.php of the component GET Parameter Handler. The manipulation of the argument i...

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracker System 1.0. This issue affects some unknown processing of the file medicines/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument GET leads to sql injection. Th...

CVE-2023-1441 SourceCodester Automatic Question Paper Generator System GET Parameter view_course.php sql injection

A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/courses/viewcourse.php of the component GET Parameter Handler. The manipulation of the argument i...

CVE-2023-1439 SourceCodester Medicine Tracker System GET Parameter view_details.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracker System 1.0. This issue affects some unknown processing of the file medicines/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument GET leads to sql injection. Th...

CVE-2023-1439

CVE-2023-1439 affects SourceCodester Medicine Tracker System 1.0. The vulnerability is in the medicines/view_details.php GET parameter handling, where improper processing of the GET argument enables SQL injection. It can be exploited remotely, and exploits have been disclosed publicly. Remediatio...

PT-2023-16984 · Sourcecodester · Sourcecodester Automatic Question Paper Generator System

Name of the Vulnerable Software and Affected Versions: SourceCodester Automatic Question Paper Generator System version 1.0 Description: A critical issue was found in the GET Parameter Handler component of the users/user/manage user.php file. The manipulation of the id argument leads to SQL...

PT-2023-16985 · Sourcecodester · Sourcecodester Automatic Question Paper Generator System

Name of the Vulnerable Software and Affected Versions: SourceCodester Automatic Question Paper Generator System version 1.0 Description: A critical issue has been found in the GET Parameter Handler component of the file admin/courses/view course.php. The manipulation of the id argument leads to s...

CVE-2022-43604

An out-of-bounds write vulnerability exists in the GetAttributeList attributecountrequest functionality of EIP Stack Group OpENer development commit 58ee13c. A specially crafted EtherNet/IP request can lead to an out-of-bounds write, potentially causing the server to crash or allow for remote cod...

PT-2023-20911 · Qibosoft · Qibocms

Name of the Vulnerable Software and Affected Versions: Qibosoft QiboCMS version 7 Description: The issue is related to a remote code execution RCE vulnerability. It is exploited via the Get Title function at the label set rs.php file. Recommendations: For Qibosoft QiboCMS version 7, consider...