9801 matches found
CVE-2024-1990: Improper Neutralization of Special Elements used in an SQL Command
The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to blind SQL Injection via the ‘id’ parameter of the RMForm shortcode in all versions up to, and including, 5.3.1.0 due to insufficient escaping on the user supplied...
PT-2024-26394 · Unknown · Campcodes Online Event Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Online Event Management System version 1.0 Description: A critical vulnerability was found in the system, affecting unknown code in the file /views/index.php. The manipulation of the ID argument leads to SQL injection. The attack ca...
CVE-2024-0952: Improper Neutralization of Special Elements used in an SQL Command
The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in all versions up to, and including, 1.12.9 due to insufficient escaping on the user supplied parameter and lack of...
CVE-2024-31506: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "id" parameter in admin/admincs.php...
Online Courseware SQL Injection Vulnerabilities
DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates from an SQL injection attack on the id parameter of the admin/edit.php file...
Online Courseware Security Vulnerabilities
DPEC Online Courseware is an online courseware system from DPEC Corporation. A security vulnerability exists in Online Courseware version 1.0, which can be exploited for cross-site scripting attacks due to the id parameter in the edit.php file...
PT-2024-25735 · Sourcecodester · Sourcecodester Online Courseware
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue was found in the software, affecting some unknown functionality of the file admin/saveedit.php. The manipulation of the id argument leads to sql injection. The attack...
PT-2024-25723 · Sourcecodester · Sourcecodester Online Courseware
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue was found in the admin/editt.php file, where the manipulation of the id argument leads to SQL injection. The attack can be initiated remotely. Recommendations: For...
PT-2024-25778 · Sourcecodester · Sourcecodester Online Courseware
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A problematic issue has been found in the software, affecting the file edit.php. The manipulation of the id argument leads to cross-site scripting. The attack can be initiated remotely...
PT-2024-25774 · Sourcecodester · Sourcecodester Online Courseware
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A problematic issue has been found in the file editt.php, where the manipulation of the id argument leads to cross-site scripting. The attack can be launched remotely. Recommendations:...
Online Library System SQL Injection Vulnerabilities
Online Library System is an open source online library system. A SQL injection vulnerability exists in SourceCodester Online Library System version 1.0, which originates from a SQL injection vulnerability in the id parameter of the admin/books/index.php file...
Online Library System Cross-Site Script Vulnerabilities
Online Library System is an open source online library system. A cross-site scripting vulnerability exists in SourceCodester Online Library System version 1.0, which originates from a cross-site scripting vulnerability in the id parameter of the admin/books/index.php file...
PT-2024-25400 · Unknown · Sourcecodester Online Library System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Library System version 1.0 Description: A vulnerability was found in the SourceCodester Online Library System, affecting unknown code of the file admin/books/index.php. The manipulation of the id argument leads to...
CVE-2024-3354
A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. It has been classified as critical. Affected is an unknown function of the file admin/modusers/index.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...
Aplaya Beach Resort Online Reservation System SQL Injection Vulnerability
Aplaya Beach Resort Online Reservation System is the online room reservation system of Aplaya Beach Resort. SourceCodester Aplaya Beach Resort Online Reservation System version 1.0 has a SQL injection vulnerability that originates from a SQL injection in the id parameter of the...
PT-2024-25293 · Sourcecodester · Sourcecodester Aplaya Beach Resort Online Reservation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Aplaya Beach Resort Online Reservation System version 1.0 Description: A critical issue has been discovered, affecting the file admin/mod comments/index.php. The manipulation of the id argument leads to SQL injection. This issu...
Aplaya Beach Resort Online Reservation System SQL Injection Vulnerability
Aplaya Beach Resort Online Reservation System is the online room reservation system of Aplaya Beach Resort. SourceCodester Aplaya Beach Resort Online Reservation System version 1.0 has a SQL injection vulnerability that originates from a SQL injection in the id parameter of the...
PT-2024-25137 · Sourcecodester · Sourcecodester Computer Laboratory Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Laboratory Management System version 1.0 Description: A critical issue has been found in the SourceCodester Computer Laboratory Management System, affecting an unknown functionality of the file /admin/category/view...
