9799 matches found
VulnCheck KEV: CVE-2024-31750
SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the reqid parameter...
editmeasurement.php SQL Injection
The vulnerability of the editmeasurement.php file in the tailoring management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary SQL code through the id parameter...
PT-2024-37612 · Unknown · Sourcecodester Medicine Tracker System
Name of the Vulnerable Software and Affected Versions: SourceCodester Medicine Tracker System version 1.0 Description: A critical issue was found in the system, affecting the /classes/Master.php file. The id argument is vulnerable to sql injection, which can be exploited remotely. Recommendations...
PT-2024-37610 · Unknown · Sourcecodester Simple Online Bidding System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Bidding System version 1.0 Description: A critical issue affects some unknown functionality of the file /admin/ajax.php?action=delete user. The manipulation of the id argument leads to sql injection. The attack ma...
Medicine Tracker System SQL Injection Vulnerability
Medicine Tracker System is a drug tracking system by the individual developer Carlo Montero. A SQL injection vulnerability exists in Medicine Tracker System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to an SQL injection...
CVE-2024-2386: Improper Neutralization of Special Elements used in an SQL Command
The WordPress Plugin for Google Maps – WP MAPS plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'putwpgm' shortcode in all versions up to, and including, 4.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
VulnCheck KEV: CVE-2023-2215
A vulnerability classified as critical has been found in Campcodes Coffee Shop POS System 1.0. Affected is an unknown function of the file /admin/user/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
LumisXP Security Vulnerability
LumisXP is a cloud-based digital experience software from Lumis Inc. It helps users gain insight into various website, blog and landing page metrics on a unified platform. A security vulnerability exists in LumisXP versions v15.0.x through v16.1.x. An attacker can exploit the vulnerability to...
School-Management-System SQL Injection Vulnerability
School-Management-System is a school management system by the individual developer Lahiru Danushka. A SQL injection vulnerability exists in School-Management-System version 1.0.0 and 1.0.1, which stems from a parameter sid in the file examresults-par.php that can lead to SQL injection...
CVE-2024-4874
The Bricks Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.9.8 via the postId parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access and...
WordPress plugin Table Addons for Elementor security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-30318
Name of the Vulnerable Software and Affected Versions Table Addons for Elementor plugin for WordPress versions up to, and including, 2.1.2 Description The Table Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id parameter due to insufficient input...
CVE-2024-4626
The JetWidgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘layouttype’ and 'id' parameters in all versions up to, and including, 1.0.17 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
Simple Student Attendance System Cross-Site Scripting Vulnerability
Simple Student Attendance System is a simple student attendance system. A cross-site scripting vulnerability exists in SourceCodester Simple Student Attendance System version 1.0, which stems from a security issue in the getstudent function in studentform.php, which is vulnerable to a cross-site...
PT-2024-37454 · Sourcecodester · Sourcecodester Simple Student Attendance System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Attendance System version 1.0 Description: A vulnerability was found in the function get student of the file student form.php. The manipulation of the argument id leads to cross-site scripting. The attack may be...
CVE-2024-4663 OSM Map Widget for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
The OSM Map Widget for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2024-4663: Improper Neutralization of Input During Web Page Generation
The OSM Map Widget for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
PT-2024-32083
Name of the Vulnerable Software and Affected Versions OSM Map Widget for Elementor plugin for WordPress versions up to, and including, 1.2.2 Description The issue is related to Reflected Cross-Site Scripting via the id parameter due to insufficient input sanitization and output escaping. This...