AMSS++ Cross-Site Scripting Vulnerability

AMSS++ is a tool for office management support systems from Amssplus. A cross-site scripting vulnerability exists in AMSS++ version 4.31, which stems from a cross-site scripting vulnerability in the bid parameter of the /amssplus/modules/book/main/bookdetailkhetperson.php page...

Online-College-Event-Hall-Reservation-System Cross-Site Scripting Vulnerability

Online-College-Event-Hall-Reservation-System is an online college event hall reservation system by Magesh K individual developer. Designed to automate the hall booking process to eliminate manual logging and increase efficiency. A cross-site scripting vulnerability exists in...

Online-College-Event-Hall-Reservation-System Cross-Site Scripting Vulnerability

Online-College-Event-Hall-Reservation-System is an online college event hall reservation system by Magesh K individual developer. Designed to automate the hall booking process to eliminate manual logging and increase efficiency. A cross-site scripting vulnerability exists in...

CVE-2023-36238

Insecure Direct Object Reference IDOR in Bagisto v.1.5.1 allows an attacker to obtain sensitive information via the invoice ID parameter...

CVE-2023-49968

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customersupport/managedepartment.php...

Simple Student Attendance System Security Vulnerability

Simple Student Attendance System is a simple student attendance system. A security vulnerability exists in Simple Student Attendance System version v.1.0. A remote attacker can use this vulnerability to execute arbitrary code via a specially crafted payload to the id parameter in the...

PT-2024-20904 · Fuel Cms · Fuel Cms

Name of the Vulnerable Software and Affected Versions: FUEL CMS version 1.5.2 Description: A reflected Cross-Site Scripting XSS issue allows attackers to run arbitrary code via a crafted string after the group id parameter. Recommendations: For FUEL CMS version 1.5.2, consider restricting access ...

CVE-2024-25223

Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.php...

PT-2024-20823 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Managment System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/edit.php" API endpoint. Recommendations: For Employee Managment System...

PT-2024-20827 · Unknown · Online Medicine Ordering System

Name of the Vulnerable Software and Affected Versions: Online Medicine Ordering System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/omos/?p=products/view product" API endpoint. Recommendations: Fo...

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere 2017 version 11.9 and earlier versions, which stems from the fact that incorrect operation of the parameter ASKDUTYID can lead to SQL injection...

WordPress Plugin HTML5 Video Player SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

SourceCodester Employee Management System Access Control Error Vulnerability

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester. An Access Control Error vulnerability exists in SourceCodester Employee Management System version 1.0, which stems from incorrect manipulation of the parameter id that...

Moderna Sistemas ModernaNet Hospital Management System Security Vulnerability

Moderna Sistemas ModernaNet Hospital Management System is a hospital management system from Moderna Sistemas. A security vulnerability exists in Moderna Sistemas ModernaNet Hospital Management System version 2024, which arises from a security issue in the way the system handles access to user dat...

CVE-2024-23877

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/currencycreate.php, in the currencyid parameter. Exploitation of this vulnerabilit...

CVE-2024-22625

Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /SupplyManagementSystem/admin/editcategory.php?id=...

Simple Student Attendance System SQL Injection Vulnerability

Simple Student Attendance System is a simple student attendance system. A SQL injection vulnerability exists in Student Attendance System version 1.0, which stems from an incorrect manipulation of the parameter classid that can lead to sql injection...

SEMCMS 安全漏洞

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A SQL injection vulnerability exists in SEMCMS v4.8, which originates from the lack of validation of externally entered SQL statements via the languageID parameter in /webinc.php. The vulnerability can b...

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in Kashipara Food Management System version 1.0, which is caused by a lack of validation of the id parameter of the itemeditsubmit.php file against externally entered SQL statements,...

Gila CMS SQL Injection Vulnerability

Gila CMS is an open source content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in Gila CMS version 1.15.4 and earlier, which originates from a vulnerability that could allow a remote attacker to execute arbitrary web scripts via the ID parameter of the login...