CVE-2024-48343: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability in ESAFENET CDG 5 and earlier allows an attacker to execute arbitrary code via the id parameter of the dataSearch.jsp page...

PT-2024-16213 · Sourcecodester · Sourcecodester Petrol Pump Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Petrol Pump Management Software version 1.0 Description: A critical issue was found in the software, affecting an unknown functionality of the file /admin/print.php. The manipulation of the id argument leads to SQL injection. T...

WordPress plugin BuddyPress has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-15971 · WordPress · Buddypress

Name of the Vulnerable Software and Affected Versions: BuddyPress plugin for WordPress versions up to, and including, 14.1.0 Description: The issue allows authenticated attackers with Subscriber-level access and above to perform actions on files outside of the originally intended directory via th...

CVE-2024-10011: Improper Limitation of a Pathname to a Restricted Directory

The BuddyPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 14.1.0 via the id parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions on files outside of the originally intended...

Petrol Pump Management Software SQL Injection Vulnerability

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A SQL injection vulnerability exists in Petrol Pump Management Software version 1.0, which originates from the id parameter in the /admin/invoice.php page containing a SQL injection vulnerabili...

Petrol Pump Management Software SQL Injection Vulnerability

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A SQL injection vulnerability exists in Petrol Pump Management Software version 1.0, which originates from the id parameter in the /admin/print.php page containing a SQL injection vulnerability...

Exploit for SQL Injection in Oretnom23 Packers_And_Movers_Management_System

CVE-2024-48427 Description A SQL injection vulnerability...

SOPlanning CMS XSS

The vulnerability of the /soplanning/www/process/groupesave.php component of the SOPlanning CMS system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using the groupeid parameter...

CVE-2024-48427: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in /mpms/admin/?page=services/manageservice&id...

PT-2024-33107

Name of the Vulnerable Software and Affected Versions Sourcecodester Packers and Movers Management System version 1.0 Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands via the id parameter in the "/mpms/admin/?page=services/manage service&id" AP...

SourceCodester’s Best House Rental Management System has a SQL injection vulnerability

SourceCodester Best House Rental Management System is a house rental management system from SourceCodester. A SQL injection vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which stems from improper manipulation of the parameter id that can lead to SQL...

CVE-2024-10278

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects an unknown part of the file /com/esafenet/servlet/user/ReUserOrganiseService.java. The manipulation of the argument userId leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-48597

Online Clinic Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /success/editp.php?action=edit...

CVE-2024-48597

Online Clinic Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /success/editp.php?action=edit...

CVE-2024-48597: Improper Neutralization of Special Elements used in an SQL Command

Online Clinic Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /success/editp.php?action=edit...

CVE-2024-48597

The Online Clinic Management System v1.0 contains a SQL injection vulnerability (CWE-89) within the id parameter of the /success/editp.php?action=edit API endpoint. This flaw allows an attacker to interfere with database queries, potentially leading to unauthorized data access or manipulation. To...

CVE-2024-48597

Online Clinic Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /success/editp.php?action=edit...

SourceCodester’s sentiment-based movie rating system has a SQL injection vulnerability

SourceCodester Sentiment Based Movie Rating System is an open source movie rating system from SourceCodester. A SQL injection vulnerability exists in SourceCodester Sentiment Based Movie Rating System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql...

Codezips Sales Management System SQL Injection Vulnerability

Codezips Sales Management System is an open source sales management system from Codezips. A SQL injection vulnerability exists in Codezips Sales Management System version 1.0, which stems from a parameter id in the file deletecustind.php that can lead to SQL injection...