PT-2023-20031 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 4.5.3 Description: A reflected cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the id parameter of the "/churchcrm/v2/family/not-found" API endpoint. This enables attackers t...

CVE-2023-25346

A reflected cross-site scripting XSS vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter of /churchcrm/v2/family/not-found...

CVE-2023-25346

A reflected cross-site scripting XSS vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter of /churchcrm/v2/family/not-found...

CVE-2023-2244

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

PT-2023-18380 · Sourcecodester · Sourcecodester Task Reminder System

Name of the Vulnerable Software and Affected Versions: SourceCodester Task Reminder System version 1.0 Description: A vulnerability was found in the processing of the file /classes/Users.php, where the manipulation of the argument id leads to cross-site scripting. The attack may be initiated...

PT-2023-18364

Name of the Vulnerable Software and Affected Versions Campcodes Retro Basketball Shoes Online Store version 1.0 Description A critical issue has been found in the software, affecting an unknown functionality of the file faqs.php. The manipulation of the id argument leads to SQL injection. This...

Campcodes Coffee Shop POS System SQL注入漏洞

Campcodes Coffee Shop POS System is a coffee shop POS system from Campcodes. Campcodes Coffee Shop POS System v1.0 suffers from a SQL injection vulnerability, which stems from the lack of validation of the parameter id of the file manageproduct.php for externally-entered SQL statements, which can...

Campcodes Coffee Shop POS System SQL注入漏洞

Campcodes Coffee Shop POS System is a coffee shop POS system from Campcodes. Campcodes Coffee Shop POS System v1.0 suffers from a SQL injection vulnerability, which stems from the lack of validation of external SQL input in the parameter id of the file viewproduct.php, which can be exploited by a...

PT-2023-18378 · Sourcecodester · Sourcecodester Task Reminder System

Name of the Vulnerable Software and Affected Versions: SourceCodester Task Reminder System version 1.0 Description: A critical issue was found in the system, affecting the file /admin/reminders/manage reminder.php. The manipulation of the id argument leads to SQL injection. It is possible to...

CVE-2023-2144

A vulnerability was found in Campcodes Online Thesis Archiving System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/departments/viewdepartment.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

Online Thesis Archiving System SQL注入漏洞

Online Thesis Archiving System is an online thesis archiving system. Online Thesis Archiving System version 1.0 has a sql injection vulnerability, which originates from the poor filtering of the id parameter in /admin/user/manageuser.php. An attacker can use this vulnerability to perform SQL...

Online Thesis Archiving System SQL注入漏洞

Online Thesis Archiving System by Carlo Montero Individual Developer provides an online platform to store student theses or capstone projects. A SQL injection vulnerability exists in Campcodes Online Thesis Archiving System version 1.0, which stems from an issue in the file...

PT-2023-18235 · Unknown · Campcodes Online Thesis Archiving System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Thesis Archiving System version 1.0 Description: A critical issue affects some unknown functionality of the file /admin/students/view details.php. The manipulation of the id argument leads to sql injection. The attack may be...

PT-2023-18236 · Campcodes · Campcodes Online Thesis Archiving System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Thesis Archiving System version 1.0 Description: A critical issue has been found in the system, affecting the /admin/curriculum/view curriculum.php file. The manipulation of the id argument leads to SQL injection, allowing fo...

CVE-2023-2130

A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0. Affected is an unknown function of the file /admin/suppliers/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is...

PT-2023-17729 · Sourcecodester · Sourcecodester Vehicle Service Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Vehicle Service Management System version 1.0 Description: A critical issue has been found in the SourceCodester Vehicle Service Management System, affecting the file /admin/mechanics/manage mechanic.php. The manipulation of th...

Sourcecodester Vehicle Service Management System SQL注入漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. It is a simple web application for automotive repair/service stores or businesses. SourceCodester Vehicle Service Management System version 1.0 suffers from a SQL injection vulnerability, which originates from the...

PT-2023-17778 · Sourcecodester · Sourcecodester Vehicle Service Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Vehicle Service Management System version 1.0 Description: A problematic vulnerability has been found in the SourceCodester Vehicle Service Management System. This issue affects an unknown part of the file /classes/Users.php. T...

PT-2023-17757 · Sourcecodester · Sourcecodester Vehicle Service Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Vehicle Service Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /classes/Master.php. The manipulation of the id argument leads to sql...

Sourcecodester Vehicle Service Management System 跨站脚本漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. A cross-site scripting vulnerability exists in SourceCodester Vehicle Service Management System version 1.0, which originates from an unknow...