6810 matches found
Simple Student Attendance System Cross-Site Scripting Vulnerability
Simple Student Attendance System is a simple student attendance system. A cross-site scripting vulnerability exists in SourceCodester Simple Student Attendance System version 1.0, which stems from a security issue in the getstudent function in studentform.php, which is vulnerable to a cross-site...
PT-2024-37454 · Sourcecodester · Sourcecodester Simple Student Attendance System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Attendance System version 1.0 Description: A vulnerability was found in the function get student of the file student form.php. The manipulation of the argument id leads to cross-site scripting. The attack may be...
CVE-2024-4663 OSM Map Widget for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
The OSM Map Widget for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2024-37791
DuxCMS3 v3.1.3 was discovered to contain a SQL injection vulnerability via the keyword parameter at /article/Content/index?classid...
CVE-2024-38347
CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Room Information module via the id parameter...
Health Care hospital Management System SQL Injection Vulnerability
Health Care hospital Management System is an open source health care hospital management system from Code-Projects. Health Care hospital Management System v1.0 version has a SQL injection vulnerability, the vulnerability stems from the id parameter in the Room Information module has a SQL injecti...
CVE-2024-37620
PHPVOD v4.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /view/admin/view.php...
CVE-2024-37620
CVE-2024-37620 affects PHPVOD v4.0, with a reflected XSS vulnerability in the id parameter of /view/admin/view.php. The issue arises from untrusted input reflected in the response, enabling script execution in the context of the victim’s browser. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I...
PT-2024-37361 · Unknown · Sourcecodester Music Class Enrollment System
Name of the Vulnerable Software and Affected Versions: SourceCodester Music Class Enrollment System version 1.0 Description: A critical issue was found in the SourceCodester Music Class Enrollment System, affecting an unknown functionality of the file "/mces/?p=class/view class". The manipulation...
PT-2024-27677 · Phpvod · Phpvod
Name of the Vulnerable Software and Affected Versions: PHPVOD version 4.0 Description: A reflected cross-site scripting XSS issue was found in PHPVOD. The issue is related to the id parameter at the "/view/admin/view.php" API endpoint. Recommendations: For PHPVOD version 4.0, avoid using the id...
CVE-2024-37620
PHPVOD v4.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /view/admin/view.php...
itsourcecode Real Estate Management System SQL Injection Vulnerability
Real Estate Management System is an open source real estate management system from Itsourcecode. SQL injection vulnerability exists in itsourcecode Real Estate Management System version 1.0, the vulnerability stems from property-detail.php contains some unknown functions, which can cause SQL...
Laundry Management System SQL Injection Vulnerability
Laundry Management System is a laundry management system. A SQL injection vulnerability exists in itsourcecode Online Laundry Management System version 1.0, which stems from adminclass.php containing an unknown function that causes SQL injection via the parameter id...
CVE-2024-37831
Itsourcecode Payroll Management System 1.0 is vulnerable to SQL Injection in payrollitems.php via the ID parameter...
CVE-2024-37831
Itsourcecode Payroll Management System 1.0 is vulnerable to SQL Injection in payrollitems.php via the ID parameter...
House Rental System SQL Injection Vulnerability
House Rental System is a house rental management system that allows you to add, modify and delete property information, and to place reservations. A SQL injection vulnerability exists in Online House Rental System version 1.0. The vulnerability stems from the fact that manageuser.php contains an...
PT-2024-37291 · Unknown · Itsourcecode Online House Rental System
Name of the Vulnerable Software and Affected Versions: itsourcecode Online House Rental System version 1.0 Description: A critical issue has been found in the itsourcecode Online House Rental System, affecting an unknown function of the file manage user.php. The manipulation of the id argument...
CVE-2024-37831
The CVE-2024-37831 entry concerns Itsourcecode Payroll Management System 1.0, with a SQL Injection in payroll_items.php exploitable via the ID parameter. The CNNVD and related records describe the issue as arising from unknown function inclusion in payroll_items.php, enabling unauthorized databas...
