9792 matches found
CVE-2024-13040
CVE-2024-13040 details (Quanta Computer QOCA aim): A vulnerability titled “Authorization Bypass Through User-Controlled Key” arises from allowing manipulation of the user ID parameter. Remote attackers with regular privileges could access features as any user, modify any user’s account informatio...
CVE-2024-13040: Authorization Bypass Through User-Controlled Key
The QOCA aim from Quanta Computer has an Authorization Bypass Through User-Controlled Key vulnerability. By controlling the user ID parameter, remote attackers with regular privileges could access certain features as any user, modify any user's account information and privileges, leading to...
Chat System chatroom.php File Cross-Site Scripting Vulnerability
Chat System is a chat system. The Chat System suffers from a cross-site scripting vulnerability that stems from a lack of adequate validation and filtering of id parameter input in the file /admin/chatroom.php. The vulnerability can be exploited to inject arbitrary web script into a page by...
PT-2024-17892 · Unknown · Code-Projects Chat System
Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical issue has been found in the code-projects Chat System, affecting the /admin/update user.php file. The manipulation of the id argument leads to SQL injection. This issue can be...
Small CRM /admin/edit-user.php File SQL Injection Vulnerability
Small CRM is a customer relationship management system. Small CRM suffers from a SQL injection vulnerability, which originates from an SQL injection vulnerability in the id parameter of the /admin/edit-user.php file. An attacker can exploit this vulnerability to obtain sensitive information or...
1000 Projects Attendance Tracking Management System: Injection Vulnerabilities
1000 Projects Attendance Tracking Management System is an open source attendance management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Attendance Tracking Management System version 1.0, which stems from an incorrect operation of the courseid parameter that can...
Simple Chat System Injection Vulnerabilities
Chat System is a chat system. Chat System suffers from a SQL injection vulnerability that originates from insufficient input validation of the id/name/password parameters in the /admin/updateroom.php file. An attacker can use this vulnerability to execute arbitrary SQL commands to obtain sensitiv...
Simple Chat System Code Injection Vulnerability
Chat System is a chat system. The Chat System suffers from a cross-site scripting vulnerability that stems from a lack of adequate validation and filtering of id parameter input in the file /admin/chatroom.php. The vulnerability can be exploited to inject arbitrary web script into a page by...
Chat System update_user.php File SQL Injection Vulnerability
Chat System is a chat system. Chat System suffers from a SQL injection vulnerability that stems from a lack of adequate validation of the input of the id parameter in the /admin/updateuser.php file. No details of the vulnerability are available at this time...
CVE-2024-12999
A vulnerability has been found in PHPGurukul Small CRM 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-user.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...
PT-2024-17860 · Unknown · Phpgurukul Small Crm
Name of the Vulnerable Software and Affected Versions: PHPGurukul Small CRM version 1.0 Description: A critical issue affects some unknown processing of the file /admin/quote-details.php. The manipulation of the id argument leads to SQL injection. The attack may be initiated remotely. The issue h...
Simple Chat System Injection Vulnerabilities
Chat System is a chat system. Chat System suffers from an SQL injection vulnerability that stems from the file /admin/chatroom.php not adequately validating and filtering the input of the id parameter. An attacker can exploit this vulnerability to obtain sensitive information...
PHPGurukul Small CRM Injection Vulnerability
Small CRM is a customer relationship management system. Small CRM suffers from a SQL injection vulnerability, which originates from an SQL injection vulnerability in the id parameter of the /admin/quote-details.php file. An attacker can exploit this vulnerability to obtain sensitive information o...
PHPGurukul Small CRM Injection Vulnerability
Small CRM is a customer relationship management system. Small CRM suffers from a SQL injection vulnerability, which originates from an SQL injection vulnerability in the id parameter of the /admin/edit-user.php file. An attacker can exploit this vulnerability to obtain sensitive information or...
PT-2024-17865 · Unknown · 1000 Projects Attendance Tracking Management System
Name of the Vulnerable Software and Affected Versions: 1000 Projects Attendance Tracking Management System version 1.0 Description: A critical issue was found in the 1000 Projects Attendance Tracking Management System. This issue affects the file /admin/attendance action.php and is related to the...
PT-2024-17863 · Unknown · 1000 Projects Portfolio Management System Mca
Name of the Vulnerable Software and Affected Versions: 1000 Projects Portfolio Management System MCA version 1.0 Description: A critical issue affects some unknown functionality of the file /update ed.php. The manipulation of the argument e id leads to SQL injection. The attack may be launched...
1000 Projects Portfolio Management System MCA Injection Vulnerability
1000 Projects Portfolio Management System MCA is an open source portfolio management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Portfolio Management System MCA version 1.0, which originates from an SQL injection vulnerability contained in the eid parameter of th...
CVE-2024-50713
SmartAgent v1.1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tests/interface.php...
