11873 matches found
CVE-2024-3348: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected is an unknown function of the file booking/index.php. The manipulation of the argument logemail/logpword leads to sql injection. It is possible to launch the attack...
CVE-2024-3357: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. This affects an unknown part of the file admin/modreports/index.php. The manipulation of the argument end leads to cross site scripting. It is possible to initiate the...
CVE-2024-3350: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. Affected by this issue is some unknown functionality of the file admin/modroom/index.php. The manipulation of the argument id leads to sql injection. The attack m...
CVE-2024-3353: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/modreports/index.php. The manipulation of the argument categ/end leads to sql injection. The attack may be initiat...
CVE-2024-3351: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0. This affects an unknown part of the file admin/modroomtype/index.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...
CVE-2024-31008
An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file...
CVE-2024-30998
SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via the email parameter in the index.php component...
CVE-2024-30998: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in PHPGurukul Men Salon Management System v.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via the email parameter in the index.php component...
CVE-2024-31008
A security vulnerability was discovered in WUZHICMS version 4.1.0 , an open-source content management system based on PHP and MySQL. The flaw allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file. As a temporary workaround, it is recommended to disab...
CVE-2024-31008
An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file...
CVE-2024-31008: Authentication Bypass by Spoofing
An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file...
CVE-2024-31008
An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file...
CVE-2024-30862: Improper Neutralization of Special Elements used in an SQL Command
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php...
CVE-2024-30862
netentsec NS-ASG version 6.3 is vulnerable to an SQL Injection vulnerability. The flaw originates from the /3g/index.php API endpoint, which fails to properly neutralize special elements used in SQL commands. This vulnerability could allow an attacker to execute unauthorized SQL queries. While no...
CVE-2024-3000 code-projects Online Book System index.php sql injection
A vulnerability classified as critical was found in code-projects Online Book System 1.0. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument username/password/loginusername/loginpassword leads to sql injection. The attack can be initiated remotely. Th...
CVE-2024-3000 code-projects Online Book System index.php sql injection
A vulnerability classified as critical was found in code-projects Online Book System 1.0. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument username/password/loginusername/loginpassword leads to sql injection. The attack can be initiated remotely. Th...
PT-2024-23177 · Unknown · Code-Projects Online Book System
Name of the Vulnerable Software and Affected Versions: code-projects Online Book System version 1.0 Description: A critical vulnerability was found in the code-projects Online Book System. This issue affects the file /index.php and is related to the manipulation of the username, password, login...
CVE-2024-3000: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in code-projects Online Book System 1.0. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument username/password/loginusername/loginpassword leads to sql injection. The attack can be initiated remotely. Th...
CVE-2024-2917: External Control of File Name or Path
A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched remotely. The...