Itsourcecode Online Furniture Shopping Project SQL Injection Vulnerability

itsourcecode Online Furniture Shopping Project is an online furniture shopping project from itsourcecode, Inc. A security vulnerability exists in itsourcecode Online Furniture Shopping Project version 1.0, which originates from a SQL injection vulnerability that allows remote attackers to execute...

CVE-2024-11121

A vulnerability classified as critical was found in 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3. Affected by this vulnerability is an unknown functionality of the file /crm/WeiXinApp/marketing/index.php?module=Users&action=getActionList. The manipulation of the argument userid leads to sql injection...

PT-2024-8733 · Timgeyssens · Uiomatic

Name of the Vulnerable Software and Affected Versions: TimGeyssens UIOMatic version 5 Description: A critical vulnerability has been found in the file /src/UIOMatic/wwwroot/backoffice/resources/uioMaticObject.r, which can lead to SQL injection. The attack can be initiated remotely. The exploit ha...

Job Recruitment Injection Vulnerabilities

Job Recruitment is a job portal project developed by code-projects using PHP, CSS, JavaScript, and MySQL technologies. An injection vulnerability exists in Job Recruitment version 1.0, which stems from an SQL injection vulnerability in the userid parameter of the admin.php page...

CVE-2024-11073

A vulnerability classified as problematic has been found in SourceCodester Hospital Management System 1.0. This affects an unknown part of the file /vm/patient/delete-account.php. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely...

Projectworlds Free Download Online Shopping System SQL Injection Vulnerability

Projectworlds Free Download Online Shopping System is an online shopping system from Projectworlds India. Projectworlds Free Download Online Shopping System 192.168.1.88 and earlier versions have a SQL injection vulnerability that stems from a SQL injection vulnerability in the parameter id...

CVE-2024-10989

A vulnerability classified as critical has been found in code-projects E-Health Care System 1.0. This affects an unknown part of the file /Admin/detail.php. The manipulation of the argument sid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

PT-2024-34496 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Cab Management System version 1.0 Description: A SQL injection issue in manage client.php and view cab.php allows remote attackers to execute arbitrary SQL commands via the id parameter, leading to unauthorized access and...

SourceCodester Online Veterinary Appointment System Injection Vulnerability

SourceCodester Online Veterinary Appointment System is a SourceCodester open source online veterinary appointment system. An injection vulnerability exists in SourceCodester Online Veterinary Appointment System version 1.0, which stems from the parameter id of the file...

CVE-2024-51030: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in manageclient.php and viewcab.php of Sourcecodester Cab Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, leading to unauthorized access and potential compromise of sensitive data within the database...

CVE-2024-50766

SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter...

PT-2024-16684 · Codezips · Codezips Hospital Appointment System

Name of the Vulnerable Software and Affected Versions: Codezips Hospital Appointment System version 1.0 Description: A critical issue has been found in the processing of the file /editBranchResult.php, where the manipulation of the ID argument leads to SQL injection. The attack can be initiated...

CVE-2024-50766

SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection due to improper neutralization of special elements in the id parameter of the takeSurvey.php page. An attacker can exploit this vulnerability to interact with the underlying database. To mitigate this risk, it is recommen...

CVE-2024-50766

SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter...

SourceCodester Survey Application System security vulnerabilities

SourceCodester Survey Application System is an open source survey application system from SourceCodester. A security vulnerability exists in SourceCodester Survey Application System version 1.0, which originates from an SQL injection vulnerability in the id parameter of the takeSurvey.php page...

PT-2024-16670 · Code Projects · Code-Projects E-Health Care System

Name of the Vulnerable Software and Affected Versions: code-projects E-Health Care System version 1.0 Description: A critical issue was discovered in the system, affecting an unknown function of the file /Doctor/delete user appointment request.php. The manipulation of the id argument leads to SQL...

CVE-2024-50766

SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter...

CVE-2024-50766: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter...

PT-2024-16563 · Unknown · Code-Projects University Event Management System

Name of the Vulnerable Software and Affected Versions: code-projects University Event Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file doedit.php. The manipulation of the id argument leads to SQL injection. It is...

PT-2024-16515 · Unknown · Codezips Pet Shop Management System

Name of the Vulnerable Software and Affected Versions: Codezips Pet Shop Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /productsadd.php. The manipulation of the argument id leads to sql injection. It is possible to...