CVE-2024-11121

A vulnerability classified as critical was found in 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3. Affected by this vulnerability is an unknown functionality of the file /crm/WeiXinApp/marketing/index.php?module=Users&action=getActionList. The manipulation of the argument userid leads to sql injection...

PT-2024-8733 · Timgeyssens · Uiomatic

Name of the Vulnerable Software and Affected Versions: TimGeyssens UIOMatic version 5 Description: A critical vulnerability has been found in the file /src/UIOMatic/wwwroot/backoffice/resources/uioMaticObject.r, which can lead to SQL injection. The attack can be initiated remotely. The exploit ha...

Job Recruitment 注入漏洞

Job Recruitment is a job portal project developed by code-projects using PHP, CSS, JavaScript, and MySQL technologies. An injection vulnerability exists in Job Recruitment version 1.0, which stems from an SQL injection vulnerability in the userid parameter of the admin.php page...

CVE-2024-11073

A vulnerability classified as problematic has been found in SourceCodester Hospital Management System 1.0. This affects an unknown part of the file /vm/patient/delete-account.php. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely...

Projectworlds Free Download Online Shopping System SQL注入漏洞

Projectworlds Free Download Online Shopping System is an online shopping system from Projectworlds India. Projectworlds Free Download Online Shopping System 192.168.1.88 and earlier versions have a SQL injection vulnerability that stems from a SQL injection vulnerability in the parameter id...

CVE-2024-10989

A vulnerability classified as critical has been found in code-projects E-Health Care System 1.0. This affects an unknown part of the file /Admin/detail.php. The manipulation of the argument sid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

SourceCodester Online Veterinary Appointment System 注入漏洞

SourceCodester Online Veterinary Appointment System is a SourceCodester open source online veterinary appointment system. An injection vulnerability exists in SourceCodester Online Veterinary Appointment System version 1.0, which stems from the parameter id of the file...

PT-2024-34496 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Cab Management System version 1.0 Description: A SQL injection issue in manage client.php and view cab.php allows remote attackers to execute arbitrary SQL commands via the id parameter, leading to unauthorized access and...

CVE-2024-50766

SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter...

SourceCodester Survey Application System 安全漏洞

SourceCodester Survey Application System is an open source survey application system from SourceCodester. A security vulnerability exists in SourceCodester Survey Application System version 1.0, which originates from an SQL injection vulnerability in the id parameter of the takeSurvey.php page...

CVE-2024-50766

SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter...

CVE-2024-50766

CVE-2024-50766 affects SourceCodester Survey Application System 1.0. The flaw is a SQL Injection in takeSurvey.php via the id parameter, allowing unauthenticated network-accessible exploitation with high impact (C/H, I/H, A/H) per CVSS 3.1: 9.8. Documented by Red Hat, NVD, CIRCL and others; PT-Se...

CVE-2024-50766

SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter...

PT-2024-16684 · Codezips · Codezips Hospital Appointment System

Name of the Vulnerable Software and Affected Versions: Codezips Hospital Appointment System version 1.0 Description: A critical issue has been found in the processing of the file /editBranchResult.php, where the manipulation of the ID argument leads to SQL injection. The attack can be initiated...

PT-2024-16670 · Code Projects · Code-Projects E-Health Care System

Name of the Vulnerable Software and Affected Versions: code-projects E-Health Care System version 1.0 Description: A critical issue was discovered in the system, affecting an unknown function of the file /Doctor/delete user appointment request.php. The manipulation of the id argument leads to SQL...

PT-2024-16563 · Unknown · Code-Projects University Event Management System

Name of the Vulnerable Software and Affected Versions: code-projects University Event Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file doedit.php. The manipulation of the id argument leads to SQL injection. It is...

PT-2024-16515 · Unknown · Codezips Pet Shop Management System

Name of the Vulnerable Software and Affected Versions: Codezips Pet Shop Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /productsadd.php. The manipulation of the argument id leads to sql injection. It is possible to...

Code-Projects Restaurant Order System SQL注入漏洞

Code-Projects Restaurant Order System is a Code-Projects open source restaurant order system. Code-Projects Restaurant Order System version 1.0 suffers from a SQL injection vulnerability, which originates from the parameter uid in the file /login.php that can lead to SQL injection...

Exploit for SQL Injection in Portabilis I-Educar

CVE-2024-48325 Description: An authenticated user can...

CVE-2024-10657

A vulnerability classified as critical has been found in Tongda OA up to 11.10. Affected is an unknown function of the file /pda/approvecenter/prcsinfo.php. The manipulation of the argument RUNID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed ...