6747 matches found
PT-2024-38181
Name of the Vulnerable Software and Affected Versions: SourceCodester School Log Management System version 1.0 Description: A critical issue has been found in the SourceCodester School Log Management System, affecting some unknown functionality of the file /admin/manage user.php. The manipulation...
PT-2024-38184 · Sourcecodester · Sourcecodester Lot Reservation Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Lot Reservation Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /lot details.php. The manipulation of the id argument leads to SQL injection...
CVE-2024-7199
A vulnerability classified as critical was found in SourceCodester Complaints Report Management System 1.0. This vulnerability affects unknown code of the file /admin/manageuser.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has...
CVE-2024-7197
A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/managecomplaint.php. The manipulation of the argument id leads to sql injection. The attack may be launched...
Lost and Found Information System 安全漏洞
Lost and Found Information System is a lost and found information system by oretnom23 individual developer. A security vulnerability exists in Lost and Found Information System version 1.0, which originates from a SQL injection vulnerability that allows remote attackers to elevate privileges via...
PT-2024-29475 · Unknown · Aml Surety Eco
Name of the Vulnerable Software and Affected Versions: AML Surety Eco versions up to 3.5 Description: The issue allows an attacker to run arbitrary code via a crafted GET request using the id parameter. This is a Cross Site Scripting XSS issue. Recommendations: For AML Surety Eco versions up to...
Blog Site 1.0 SQL Injection
Titles: blog-site-1.0 Multiple-SQLi Author: nu11secur1ty Date: 07/29/2024 Vendor: https://github.com/oretnom23 Software: https://www.sourcecodester.com/php/14442/blog-site-using-phpmysql.html Reference: https://portswigger.net/web-security/sql-injection Description: The id parameter appears to be...
PT-2024-27788 · Unknown · Lost/Found Information System
Name of the Vulnerable Software and Affected Versions: Lost and Found Information System version 1.0 Description: The issue allows a remote attacker to escalate privileges. This is achieved via the id parameter to the "php-lfis/admin/categories/manage category.php" endpoint. Recommendations: For...
PT-2024-38159 · Sourcecodester · Sourcecodester Complaint Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Complaints Report Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /admin/manage complaint.php, where the manipulation of the id argument leads to sql injection. The...
PT-2024-38160 · Sourcecodester · Sourcecodester Complaint Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Complaints Report Management System version 1.0 Description: A critical issue has been discovered, affecting the /admin/manage station.php file. The manipulation of the id argument leads to SQL injection, allowing for remote...
SourceCodester School Fees Payment System SQL注入漏洞
SourceCodester School Fees Payment System is a school fees payment system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester School Fees Payment System, which stems from an SQL injection vulnerability in the id parameter of the /managecourse.php file...
PT-2024-38127 · Unknown · Sourcecodester School Fees Payment System
Name of the Vulnerable Software and Affected Versions: SourceCodester School Fees Payment System version 1.0 Description: A critical issue affects the processing of the file /view payment.php, where the manipulation of the argument ef id leads to sql injection. The attack can be initiated remotel...
SourceCodester School Fees Payment System SQL注入漏洞
SourceCodester School Fees Payment System is a school fees payment system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester School Fees Payment System, which stems from an SQL injection vulnerability in the efid parameter of the /receipt.php file...
PT-2024-38129 · Unknown · Sourcecodester School Fees Payment System
Name of the Vulnerable Software and Affected Versions: SourceCodester School Fees Payment System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /manage course.php. The manipulation of the id argument leads to sql injection...
PT-2024-38087 · Unknown · Md-Mafujul-Hasan Online-Payroll-Management-System
Name of the Vulnerable Software and Affected Versions: MD-MAFUJUL-HASAN Online-Payroll-Management-System affected versions not specified Description: A critical vulnerability has been found in the system, affecting an unknown function of the file /shift viewmore.php. The manipulation of the id...
Online-Payroll-Management-System SQL注入漏洞
Online-Payroll-Management-System is an online payroll management system by the individual developer MD MAFUJUL HASAN. A SQL injection vulnerability exists in Online-Payroll-Management-System version 20230911 and prior versions, which stems from an incorrect manipulation of the parameter id that c...
Online-Payroll-Management-System SQL注入漏洞
Online-Payroll-Management-System is an online payroll management system by the individual developer MD MAFUJUL HASAN. A SQL injection vulnerability exists in Online-Payroll-Management-System version 20230911 and prior versions, which stems from an incorrect manipulation of the parameter id that c...
CVE-2024-6905
A vulnerability has been found in SourceCodester Record Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file viewinfouser.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...
Simple Inventory Management System SQL注入漏洞
Simple Inventory Management System is a simple inventory management system. A SQL injection vulnerability exists in Simple Inventory Management System version 1.0 due to a lack of validation of the parameter orderid against externally entered SQL statements. An attacker can exploit this...