CVE-2024-4663 OSM Map Widget for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

The OSM Map Widget for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2024-37791

DuxCMS3 v3.1.3 was discovered to contain a SQL injection vulnerability via the keyword parameter at /article/Content/index?classid...

CVE-2024-38347

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Room Information module via the id parameter...

Health Care hospital Management System SQL Injection Vulnerability

Health Care hospital Management System is an open source health care hospital management system from Code-Projects. Health Care hospital Management System v1.0 version has a SQL injection vulnerability, the vulnerability stems from the id parameter in the Room Information module has a SQL injecti...

CVE-2024-37620

PHPVOD v4.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /view/admin/view.php...

CVE-2024-37620

CVE-2024-37620 affects PHPVOD v4.0, with a reflected XSS vulnerability in the id parameter of /view/admin/view.php. The issue arises from untrusted input reflected in the response, enabling script execution in the context of the victim’s browser. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I...

PT-2024-27677 · Phpvod · Phpvod

Name of the Vulnerable Software and Affected Versions: PHPVOD version 4.0 Description: A reflected cross-site scripting XSS issue was found in PHPVOD. The issue is related to the id parameter at the "/view/admin/view.php" API endpoint. Recommendations: For PHPVOD version 4.0, avoid using the id...

PT-2024-37361 · Unknown · Sourcecodester Music Class Enrollment System

Name of the Vulnerable Software and Affected Versions: SourceCodester Music Class Enrollment System version 1.0 Description: A critical issue was found in the SourceCodester Music Class Enrollment System, affecting an unknown functionality of the file "/mces/?p=class/view class". The manipulation...

CVE-2024-37620

PHPVOD v4.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /view/admin/view.php...

itsourcecode Real Estate Management System SQL Injection Vulnerability

Real Estate Management System is an open source real estate management system from Itsourcecode. SQL injection vulnerability exists in itsourcecode Real Estate Management System version 1.0, the vulnerability stems from property-detail.php contains some unknown functions, which can cause SQL...

Laundry Management System SQL Injection Vulnerability

Laundry Management System is a laundry management system. A SQL injection vulnerability exists in itsourcecode Online Laundry Management System version 1.0, which stems from adminclass.php containing an unknown function that causes SQL injection via the parameter id...

CVE-2024-37831

Itsourcecode Payroll Management System 1.0 is vulnerable to SQL Injection in payrollitems.php via the ID parameter...

CVE-2024-37831

Itsourcecode Payroll Management System 1.0 is vulnerable to SQL Injection in payrollitems.php via the ID parameter...

House Rental System SQL Injection Vulnerability

House Rental System is a house rental management system that allows you to add, modify and delete property information, and to place reservations. A SQL injection vulnerability exists in Online House Rental System version 1.0. The vulnerability stems from the fact that manageuser.php contains an...

CVE-2024-37831

The CVE-2024-37831 entry concerns Itsourcecode Payroll Management System 1.0, with a SQL Injection in payroll_items.php exploitable via the ID parameter. The CNNVD and related records describe the issue as arising from unknown function inclusion in payroll_items.php, enabling unauthorized databas...

PT-2024-37291 · Unknown · Itsourcecode Online House Rental System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online House Rental System version 1.0 Description: A critical issue has been found in the itsourcecode Online House Rental System, affecting an unknown function of the file manage user.php. The manipulation of the id argument...

CVE-2024-37831

Itsourcecode Payroll Management System 1.0 is vulnerable to SQL Injection in payrollitems.php via the ID parameter...

CVE-2024-37831

Itsourcecode Payroll Management System 1.0 is vulnerable to SQL Injection in payrollitems.php via the ID parameter...

CVE-2024-36840

SQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code and obtain sensitive information via the id parameter to newsdetails.php and locationdetails.php; and the section parameter to services.php...

CVE-2024-5543

The Slideshow Gallery LITE plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in all versions up to, and including, 1.8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possib...