CVE-2024-42785

A SQL injection vulnerability in /music/index.php?page=viewplaylist in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter...

CVE-2024-42786

A SQL injection vulnerability in "/music/viewuser.php" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter of View User Profile Page...

CVE-2024-42785

Kashipara Music Management System v1.0 contains a SQL injection in /music/index.php?page=view_playlist via the id parameter. The issue stems from lack of input validation, enabling an attacker to execute arbitrary SQL commands. This impacts confidentiality, integrity, and availability per the CVE...

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. A SQL injection vulnerability exists in Kashipara Music Management System v1.0, which originates from the lack of validation of the "id" parameter of /music/index.php?page=viewplaylist against external input SQL...

PT-2024-30157 · Unknown · Kashipara Music Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: A SQL injection vulnerability in the /music/index.php?page=view playlist endpoint allows an attacker to execute arbitrary SQL commands via the id parameter. This issue enables an...

PT-2024-30158 · Unknown · Kashipara Music Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: A SQL injection issue in the "/music/view user.php" endpoint allows an attacker to execute arbitrary SQL commands via the id parameter of the View User Profile Page. This could...

PT-2024-30156 · Unknown · Kashipara Music Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: A SQL injection issue exists in the "/music/controller.php?page=view music" endpoint, allowing an attacker to execute arbitrary SQL commands via the id parameter. This enables attacke...

CVE-2024-42565

ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/contact/delete?action=delete...

CVE-2024-42564

ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/inventory/delete?action=delete...

CVE-2024-42558

Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the bookid parameter at adminmodifyroom.php...

itsourcecode Project Expense Monitoring System SQL注入漏洞

Project Expense Monitoring System is itsourcecode open source project expense monitoring system. The SQL injection vulnerability exists in itsourcecode Project Expense Monitoring System version 1.0, which originates from a SQL injection vulnerability in the transferid parameter of the...

CVE-2024-42565

ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/contact/delete?action=delete...

CVE-2024-42565

CVE-2024-42565 affects an ERP system where commit 44bd04 introduces a SQL injection via the id parameter in /index.php/basedata/contact/delete?action=delete. The advisory documents indicate a high-severity impact (CVSS v3.1: 9.8, CRITICAL) with network access, no privileges required, no user inte...

CVE-2024-42564

CVE-2024-42564 affects ERP with a SQL injection vulnerability in the id parameter at /index.php/basedata/inventory/delete?action=delete. The issue arises from unsafely handling the id input, enabling potential SQL injection. Connected sources confirm the vulnerable endpoint and parameter across m...

PT-2024-30011 · Unknown · Hotel Management System

Name of the Vulnerable Software and Affected Versions: Hotel Management System version 91caab8 Description: A SQL injection vulnerability was discovered in the Hotel Management System via the book id parameter at the "admin room history.php" endpoint. This issue allows for potential unauthenticat...

Hotel-Management-System 安全漏洞

Hotel-Management-System is a hotel management system by the individual developer Vaibhav Verma. Hotel-Management-System has a security vulnerability that stems from the bookid parameter of adminroomhistory.php containing an SQL injection vulnerability...

CVE-2024-42565

ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/contact/delete?action=delete...

PT-2024-38574 · WordPress · The Contact Form By Bit Form

Name of the Vulnerable Software and Affected Versions: Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress versions 2.0 through 2.13.9 Description: The issue is related to generic SQL Injection via the id...

SourceCodester Online Graduate Tracer System SQL注入漏洞

SourceCodester Online Graduate Tracer System is a web-based application project developed by SourceCodester using PHP and MySQL database. Its main purpose is to provide a platform for a school to track their alumni and generate graphical reports on alumni status. A SQL injection vulnerability...

PT-2024-38107 · WordPress · Jetelements

Name of the Vulnerable Software and Affected Versions: JetElements plugin for WordPress versions up to, and including, 2.6.20 Description: The issue is related to Stored Cross-Site Scripting XSS due to insufficient input sanitization and output escaping. This allows authenticated attackers with...