CVE-2024-4675

A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /view/showevents.php. The manipulation of the argument eventid leads to cross site scripting. The attack can be initiated...

CVE-2024-4673

A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is some unknown functionality of the file /view/showstudentgradesubject.php. The manipulation of the argument id leads to cross site scripting...

CVE-2024-4316

The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 3.9.16 due to insufficient input...

CVE-2024-3055

The Unlimited Elements For Elementor Free Widgets, Addons, Templates plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.5.102 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...

CVE-2024-34310

Jin Fang Times Content Management System v3.2.3 was discovered to contain a SQL injection vulnerability via the id parameter...

College Management System SQL Injection Vulnerability

College Management System is a simple project organized by Code Projects. It is used to keep track of students, faculty, subjects, schedules and all things related to the university. College Management System version 1.0 has a SQL injection vulnerability that stems from a SQL injection...

College Management System SQL Injection Vulnerability

College Management System is a simple project organized by Code Projects. It is used to keep track of students, teachers, subjects, schedules and all things related to the university. College Management System version 1.0 has a SQL injection vulnerability that stems from an SQL injection...

Campcodes Complete Web-Based School Management System Cross-site Scripting Vulnerabilities

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which stems from a cross-site scripting vulnerability in the ...

PT-2024-26290 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the /admin/banner deal.php component. The mudi, dataType, dataTypeCN, theme, and dataID parameters are involved. This allows for unauthorized action...

CVE-2024-34310: Improper Neutralization of Special Elements used in an SQL Command

Jin Fang Times Content Management System v3.2.3 was discovered to contain a SQL injection vulnerability via the id parameter...

WordPress Plugin RSS Aggregator Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Laundry Management System security vulnerabilities

Laundry Management System is a laundry management system. A security vulnerability exists in version 1.0 of the Online Laundry Management System due to an improper control of resource identifiers in the id parameter of the manageuser.php file...

Layering Management System SQL Injection Vulnerability

Laundry Management System is a laundry management system. A SQL injection vulnerability exists in Online Laundry Management System version 1.0, which originates from a SQL injection vulnerability in the id parameter of the /manageinv.php file...

College Management System SQL Injection Vulnerability

College Management System is a simple project organized by Code Projects. It is used to keep track of students, teachers, subjects, schedules and all things related to college. College Management System version 1.0 has a SQL injection vulnerability that stems from a SQL injection vulnerability in...

Visitor Management System security vulnerabilities

Visitor Management System is a visitor management system. A security vulnerability exists in SourceCodester Visitor Management System version 1.0, which originates from a SQL injection vulnerability that allows an attacker to execute arbitrary SQL commands via the id parameter...

Jin Fang Times Content Management System security vulnerability

Jin Fang Times Content Management System is a content management system from Jin Fang Times. A security vulnerability exists in Jin Fang Times Content Management System version v3.2.3, which originates from a SQL injection vulnerability via the id parameter...

CVE-2024-4329: Improper Neutralization of Input During Web Page Generation

The Thim Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access...

CVE-2024-34226: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in /php-sqlite-vms/?page=managevisitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters...

CVE-2024-3055: Improper Neutralization of Special Elements used in an SQL Command

The Unlimited Elements For Elementor Free Widgets, Addons, Templates plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.5.102 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...

CVE-2024-4316: Improper Neutralization of Input During Web Page Generation

The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 3.9.16 due to insufficient input...