CVE-2024-5312

PHP Server Monitor, version 3.2.0, is vulnerable to an XSS via the /phpservermon-3.2.0/vendor/phpmailer/phpmailer/testscript/index.php page in all visible parameters. An attacker could create a specially crafted URL, send it to a victim and retrieve their session details...

CVE-2024-5312

CVE-2024-5312 describes an XSS in PHP Server Monitor 3.2.0. Affected component: the index.php under /vendor/phpmailer/phpmailer/test_script/index.php, where all visible parameters are vulnerable. An attacker can craft a URL that, when visited by a user, could expose the victim’s session details. ...

CVE-2024-5312: Improper Neutralization of Input During Web Page Generation

PHP Server Monitor, version 3.2.0, is vulnerable to an XSS via the /phpservermon-3.2.0/vendor/phpmailer/phpmailer/testscript/index.php page in all visible parameters. An attacker could create a specially crafted URL, send it to a victim and retrieve their session details...

CVE-2024-5135: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Directory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2024-5048 code-projects Budget Management index.php sql injection

A vulnerability classified as critical was found in code-projects Budget Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument edit leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2024-5048

The CVE-2024-5048 entry concerns code-projects Budget Management 1.0. The vulnerability is triggered via the /index.php file, where manipulating the edit parameter enables SQL injection. Attackers can exploit remotely, and public disclosures exist (exploit disclosed). The issue is supported by mu...

CVE-2024-5048: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Budget Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument edit leads to sql injection. The attack can be launched remotely. The exploit has been...

Budget Management SQL注入漏洞

SourceCodester Budget Management System is an application from SourceCodester, Inc. It provides a function to calculate exact expenses through a web application. A SQL injection vulnerability exists in Budget Management version 1.0, which stems from the parameter edit in the file /index.php that...

CVE-2024-5063: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Online Course Registration System 3.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. T...

CVE-2024-4930: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Simple Online Bidding System 1.0. This vulnerability affects unknown code of the file /simple-online-bidding-system/index.php?page=viewprod. The manipulation of the argument id leads to sql injection. The attack can be initiated...

Simple Online Bidding System SQL Injection Vulnerability

Simple Online Bidding System is an online bidding system by oretnom23 individual developer. A SQL injection vulnerability exists in Simple Online Bidding System version 1.0, which originates from /simple-online-bidding-system/index.php, which contains unknown code that leads to SQL injection via...

CVE-2024-4931: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Online Bidding System 1.0. This issue affects some unknown processing of the file /simple-online-bidding-system/admin/index.php?page=viewudet. The manipulation of the argument id leads to sql injection. The...

CVE-2024-4818

A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

CVE-2024-4818: External Control of File Name or Path

A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

CVE-2024-4822: Improper Neutralization of Input During Web Page Generation

Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php'. This vulnerability allows an attacker to partially take control of the victim's browser session...

CVE-2024-4722: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument category leads to cross site scripting. The attack can be initiated remotely. The explo...

CVE-2024-4818 Campcodes Online Laundry Management System index.php file inclusion

A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

CVE-2024-4818

CVE-2024-4818 affects Campcodes Online Laundry Management System 1.0. A vulnerability in the /index.php? page parameter enables (remote) file inclusion via manipulation of the page argument. This is a network-accessible path with no authentication required; the impact wording in sources cites pos...

CVE-2024-33409

SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter...

CVE-2024-33409: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter...