13670 matches found
CVE-2024-11077 code-projects Job Recruitment index.php sql injection
A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...
CVE-2024-11077: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...
PT-2024-16762
Name of the Vulnerable Software and Affected Versions 1000 Projects Beauty Parlour Management System version 1.0 Description A critical vulnerability was found in the 1000 Projects Beauty Parlour Management System. The issue affects an unknown functionality of the file /index.php. The manipulatio...
PT-2024-16740 · Unknown · Code-Projects Job Recruitment
Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A critical vulnerability was found in the code-projects Job Recruitment software. The issue affects an unknown function of the file /index.php. The manipulation of the email argument lead...
CVE-2024-10758 code-projects/anirbandutta9 Content Management System/News-Buzz index.php sql injection
A vulnerability, which was classified as critical, was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack...
CVE-2024-10758: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack...
PT-2024-16521 · Unknown +1 · Code-Projects/Anirbandutta9 Content Management System +1
Name of the Vulnerable Software and Affected Versions: code-projects/anirbandutta9 Content Management System and News-Buzz version 1.0 Description: A critical issue was found in the software, affecting an unknown part of the file /index.php. The manipulation of the user name argument leads to SQL...
CVE-2024-51060
Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'aid' parameter...
CVE-2024-51065
Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter...
CVE-2024-51060
Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'aid' parameter...
CVE-2024-51060
Projectworlds Online Admission System v1 is vulnerable to SQL Injection within the index.php file. The vulnerability is triggered via the 'a_id' parameter, potentially allowing for unauthorized exploitation of the database. To mitigate this risk, it is recommended to restrict access to the 'a_id'...
CVE-2024-51065
Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter...
CVE-2024-51060
Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'aid' parameter...
CVE-2024-51065: Improper Neutralization of Special Elements used in an SQL Command
Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter...
CVE-2024-51060: Improper Neutralization of Special Elements used in an SQL Command
Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'aid' parameter...
PT-2024-34511
Name of the Vulnerable Software and Affected Versions: Phpgurukul Beauty Parlour Management System version 1.1 Description: The issue is related to SQL Injection in the admin/index.php file via the username parameter. This allows for potential exploitation of the system. Recommendations: For...
GHSA-PJHX-J53P-C5F5 ThinkPHP deserialization vulnerability
A deserialization vulnerability in the component \controller\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code...
CVE-2024-48112
A deserialization vulnerability in the component \controller\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code...
