PT-2024-15787 · Unknown · Project Worlds Online Time Table Generator

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Time Table Generator version 1.0 Description: A critical issue was found in the file course ajax.php, where the manipulation of the id argument leads to sql injection. This can be initiated remotely. The issue has been...

Project Worlds Online Time Table Generator SQL Injection Vulnerability

Online Time Table Generator is an online time table generator by Yugesh Verma Personal Developer. Project Worlds Online Time Table Generator version 1.0 suffers from a SQL injection vulnerability that stems from the parameter id of the file courseajax.php that can lead to SQL injection...

CVE-2023-6373

The ArtPlacer Widget WordPress plugin before 2.20.7 does not sanitize and escape the "id" parameter before submitting the query, leading to a SQLI exploitable by editors and above. Note: Due to the lack of CSRF check, the issue could also be exploited via a CSRF against a logged editor or above...

PT-2024-19505 · Unknown · Complete Supplier Management System

Name of the Vulnerable Software and Affected Versions: Complete Supplier Management System version 1.0 Description: The issue is related to SQL Injection via the "/Supply Management System/admin/edit retailer.php" endpoint, specifically the id parameter. This allows for potential exploitation. No...

CVE-2024-0466

A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file filetable.php. The manipulation of the argument perid leads to sql injection. The exploit has been disclosed to the...

CVE-2023-51978

In PHPGurukul Art Gallery Management System v1.1, "Update Artist Image" functionality of "imageid" parameter is vulnerable to SQL Injection...

CVE-2023-30016

SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via subeventid parameter in subeventdetailsedit.php...

PT-2024-15595 · Code Projects · Code-Projects Fighting Cock Information System

Name of the Vulnerable Software and Affected Versions: code-projects Fighting Cock Information System version 1.0 Description: A critical issue affects the processing of the file /admin/pages/edit chicken.php, where the manipulation of the id argument leads to sql injection. The attack can be...

CVE-2023-30014

SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via subeventid parameter in subeventstatupdate.php...

PT-2024-15583 · Code Projects · Employee Profile Management System

Name of the Vulnerable Software and Affected Versions: code-projects Employee Profile Management System version 1.0 Description: A critical issue has been found in the Employee Profile Management System, affecting the processing of the file file table.php. The manipulation of the per id argument...

PT-2024-15546 · Unknown · Codeastro Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: CodeAstro Online Food Ordering System version 1.0 Description: A problem was found in the CodeAstro Online Food Ordering System. It affects some unknown functionality of the file dishes.php. The manipulation of the res id argument leads to...

PT-2024-15521 · Unknown · Sourcecodester Simple Student Attendance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Attendance System version 1.0 Description: A critical vulnerability was found in the SourceCodester Student Attendance System. The issue affects an unknown function of the file attendance report.php. The manipulation of...

Kashipara Food Management System 安全漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in version 1.0 of the Kashipara Food Management System, which stems from a lack of validation of externally entered SQL statements in the parameter id of the itemlistedit.php file,...

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in Kashipara Food Management System version 1.0, which originates from a lack of validation of externally entered SQL statements in the id parameter of the addmaterialedit.php file, a...

CVE-2024-0241

encodedid-rails versions before 1.0.0.beta2 are affected by an uncontrolled resource consumption vulnerability. A remote and unauthenticated attacker might cause a denial of service condition by sending an HTTP request with an extremely long "id" parameter...

CVE-2023-50864

Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelId' parameter of the hotelDetails.php resource does not validate the characters received and they are sent unfiltered to the database...

PT-2024-13772 · Billing · Billing

Name of the Vulnerable Software and Affected Versions: Billing Software version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the id parameter of the "partylist edit submit.php" resource does not validate the characters received, and the...

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in Kashipara Billing Software v1.0, which originates when the id parameter of the partylisteditsubmit.php page is processed without filtering the data and sending it to the database for...

CVE-2023-6981

The WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc plugin for WordPress is vulnerable to SQL Injection via the 'groupid' parameter in all versions up to, and including, 6.5 due to insufficient escaping on the user supplied parameter and lack of sufficient...

WordPress Plugin WP SMS SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exists i...