Code-Projects Job Portal SQL注入漏洞

Code-Projects Job Portal is Code-Projects open source PHP-based job site system. Code-Projects Job Portal version 1.0 has a SQL injection vulnerability, the vulnerability stems from the id parameter in the rwinat.php file contains a SQL injection vulnerability...

SourceCodester Kortex Lite Advocate Office Management System 安全漏洞

SourceCodester Kortex Lite Advocate Office Management System is an office management system from SourceCodester, Inc. A security vulnerability exists in version 1.0 of the SourceCodester Kortex Lite Advocate Office Management System, which stems from an SQL injection vulnerability in the id...

PT-2024-38492 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the id argument in an unknown function of the file view details.php. Thi...

PT-2024-38494 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A critical issue has been found in the SourceCodester Car Driving School Management System, affecting some unknown functionality of the file view package.php. The...

PT-2024-38491 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A critical issue affects the management of the file manage user.php, where the manipulation of the id argument leads to SQL injection. This issue may be initiated...

PT-2024-38496 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Car Driving School Management System version 1.0 Description: A critical issue has been discovered, affecting the delete package function of the Master.php file. The manipulation of the id argument leads to SQL injection. This...

PT-2024-38498 · Sourcecodester · Sourcecodester Car Driving School Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Car Driving School Management System version 1.0 Description: A critical issue has been found, allowing for SQL injection through the manipulation of the id argument in the save package function of the /classes/Master.php?f=sav...

PT-2024-38471 · Sourcecodester · Sourcecodester Kortex Lite Advocate Office Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Kortex Lite Advocate Office Management System version 1.0 Description: A critical issue was found in the system, affecting the delete act.php file. The manipulation of the id argument leads to SQL injection. This issue can be...

WordPress Slider by 10Web plugin <= 1.2.57 - Authenticated (Contributor+) SQL Injection via id Parameter vulnerability

Authenticated Contributor+ SQL Injection via id Parameter vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Slider by 10Web versions = 1.2.57...

PT-2024-38112 · 10Web · The Slider By 10Web

Name of the Vulnerable Software and Affected Versions: The Slider by 10Web – Responsive Image Slider plugin for WordPress versions up to, and including, 1.2.57 Description: The issue is related to time-based SQL Injection via the id parameter due to insufficient escaping on the user-supplied...

CVE-2024-33982

Cross-Site Scripting XSS vulnerability in School Attendance Monitoring System and School Event Management System affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'StudentID' parameter in...

CVE-2024-33990 Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System

Cross-Site Scripting XSS vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted javascript payload to an authenticated user and partially take over their browser session via the 'id' and 'view' parameters ...

CVE-2024-33990

CVE-2024-33990 describes a Cross-Site Scripting (XSS) vulnerability in School Event Management System v1.0 . The issue can be triggered by an authenticated user who receives a specially crafted payload via the id and view parameters in /user/index.php , allowing an attacker to partially take over...

CVE-2024-33969

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in...

CVE-2024-33963

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in '/admin/modroom/index.php'...

CVE-2024-33969 SQL injection in Janobe products

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in...

CVE-2024-33963 SQL injection in Janobe products

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in '/admin/modroom/index.php'...

CVE-2024-33957

CVE-2024-33957 affects E-Negosyo System v1.0. The vulnerability is an SQL injection in /admin/orders/controller.php (parameter id) that can retrieve all data stored under id. NVD assigns CVSS v3.1 base score 7.5 (HIGH); CNA/other sources list up to 9.8 (CRITICAL) with NETWORK attack, low complexi...

PT-2024-25608 · Unknown · E-Negosyo System

Name of the Vulnerable Software and Affected Versions: E-Negosyo System version 1.0 Description: A Cross-Site Scripting XSS issue allows an attacker to partially take over an authenticated user's browser session. This can be achieved by sending a specially crafted JavaScript payload via the id...

PT-2024-25622 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Event Management System version 1.0 Description: A Cross-Site Scripting XSS issue exists, allowing an attacker to send a specially crafted javascript payload to an authenticated user, potentially taking over their browser session. This...