PT-2024-38252 · Sourcecodester · Establishment Billing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Establishment Billing Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /manage block.php. The manipulation of the id argument leads to SQL injection...

Establishment Billing Management System SQL Injection Vulnerability

Establishment Billing Management System is a billing management system by oretnom23 Individual Developer. An SQL injection vulnerability exists in the Establishment Billing Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...

Establishment Billing Management System SQL Injection Vulnerability

Establishment Billing Management System is a billing management system by oretnom23 Individual Developer. An SQL injection vulnerability exists in the Establishment Billing Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...

PT-2024-38238 · Sourcecodester · Sourcecodester Establishment Billing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Establishment Billing Management System version 1.0 Description: A critical issue affects some unknown functionality of the file "manage payment.php". The manipulation of the id argument leads to sql injection. The attack can b...

Establishment Billing Management System SQL Injection Vulnerability

Establishment Billing Management System is a billing management system by oretnom23 Individual Developer. An SQL injection vulnerability exists in the Establishment Billing Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...

CVE-2024-7221

A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. This affects an unknown part of the file /admin/manageuser.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and...

PT-2024-38184 · Sourcecodester · Sourcecodester Lot Reservation Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lot Reservation Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /lot details.php. The manipulation of the id argument leads to SQL injection...

PT-2024-38181

Name of the Vulnerable Software and Affected Versions SourceCodester School Log Management System version 1.0 Description A critical issue has been found in the SourceCodester School Log Management System, affecting some unknown functionality of the file /admin/manage user.php. The manipulation o...

CVE-2024-7199

A vulnerability classified as critical was found in SourceCodester Complaints Report Management System 1.0. This vulnerability affects unknown code of the file /admin/manageuser.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2024-7197

A vulnerability was found in SourceCodester Complaints Report Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/managecomplaint.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

CVE-2024-37858: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to php-lfis/admin/categories/managecategory.php...

PT-2024-29475 · Unknown · Aml Surety Eco

Name of the Vulnerable Software and Affected Versions: AML Surety Eco versions up to 3.5 Description: The issue allows an attacker to run arbitrary code via a crafted GET request using the id parameter. This is a Cross Site Scripting XSS issue. Recommendations: For AML Surety Eco versions up to...

CVE-2024-41640: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in AML Surety Eco up to 3.5 allows an attacker to run arbitrary code via crafted GET request using the id parameter...

Blog Site 1.0 SQL Injection

Titles: blog-site-1.0 Multiple-SQLi Author: nu11secur1ty Date: 07/29/2024 Vendor: https://github.com/oretnom23 Software: https://www.sourcecodester.com/php/14442/blog-site-using-phpmysql.html Reference: https://portswigger.net/web-security/sql-injection Description: The id parameter appears to be...

PT-2024-27788 · Unknown · Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: Lost and Found Information System version 1.0 Description: The issue allows a remote attacker to escalate privileges. This is achieved via the id parameter to the "php-lfis/admin/categories/manage category.php" endpoint. Recommendations: For...

Lost and Found Information System security vulnerabilities

Lost and Found Information System is a lost and found information system by oretnom23 individual developer. A security vulnerability exists in Lost and Found Information System version 1.0, which originates from a SQL injection vulnerability that allows remote attackers to elevate privileges via...

PT-2024-38160 · Sourcecodester · Sourcecodester Complaint Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Complaints Report Management System version 1.0 Description: A critical issue has been discovered, affecting the /admin/manage station.php file. The manipulation of the id argument leads to SQL injection, allowing for remote...

PT-2024-38159 · Sourcecodester · Sourcecodester Complaint Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Complaints Report Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /admin/manage complaint.php, where the manipulation of the id argument leads to sql injection. The...

CVE-2024-37857: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categories/viewcategory.php...

PT-2024-38129 · Unknown · Sourcecodester School Fees Payment System

Name of the Vulnerable Software and Affected Versions: SourceCodester School Fees Payment System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /manage course.php. The manipulation of the id argument leads to sql injection...