CVE-2024-37859

Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page parameter to php-lfis/admin/index.php...

CVE-2024-37859

A Cross-Site Scripting (XSS) vulnerability exists in Lost and Found Information System version 1.0 . A remote attacker can exploit the page parameter of the /php-lfis/admin/index.php endpoint to execute malicious JavaScript in the context of other users, potentially leading to privilege escalatio...

CVE-2024-37857

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categories/viewcategory.php...

CVE-2024-37856

Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the first, last, middle name fields in the User Profile page...

CVE-2024-37858

The Lost and Found Information System 1.0 is vulnerable to a SQL Injection vulnerability. A remote attacker can escalate privileges by exploiting the id parameter within the php-lfis/admin/categories/manage_category.php endpoint. This vulnerability allows for unauthenticated Blind Time-Based SQL ...

CVE-2024-37856

CVE-2024-37856 : A stored XSS in Lost and Found Information System 1.0 affects the users’ profile fields (first, last, middle name) on the User Profile page, enabling a remote attacker to escalate privileges. The vulnerability is triggered via input into profile name fields and has been demonstra...

CVE-2024-37857

Lost and Found Information System version 1.0 is vulnerable to a remote SQL Injection vulnerability. An attacker can escalate privileges by targeting the id parameter within the php-lfis/admin/categories/view_category.php endpoint. This vulnerability allows for unauthenticated Blind Boolean-Based...

CVE-2024-37858

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to php-lfis/admin/categories/managecategory.php...

CVE-2024-37859

Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page parameter to php-lfis/admin/index.php...

PT-2024-27787 · Unknown · Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: Lost and Found Information System version 1.0 Description: The issue allows a remote attacker to escalate privileges. This is achieved via the id parameter to the "php-lfis/admin/categories/view category.php" endpoint. Recommendations: For Lo...

CVE-2024-37858: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to php-lfis/admin/categories/managecategory.php...

CVE-2024-37859: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page parameter to php-lfis/admin/index.php...

CVE-2024-37856: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the first, last, middle name fields in the User Profile page...

CVE-2024-37857: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categories/viewcategory.php...

CVE-2024-37856

Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the first, last, middle name fields in the User Profile page...

Number withdrawn

Esri ArcGIS Enterprise is a GIS Geographic Information System based software system from Environmental Systems Research Institute Esri, Inc. The system supports mapping and visualization, analysis, and data management. This CVE number has been withdrawn...

Lost And Found Information System 1.0 SQL Injection

Exploit Title: Unauthenticated Blind Time-Based SQL Injection Exploit - Lost and Found Information System Exploit Author: Amit Roy Rezur / AR0x7 Date: June 07, 2024 Vendor Homepage:...

Lost And Found Information System 1.0 Cross Site Scripting

Exploit Title: Refelcted Cross Site Scripting Exploit - Lost and Found Information System Exploit Author: Amit Roy Rezur / AR0x7 Date: June 07, 2024 Vendor Homepage: https://www.sourcecodester.com/php/16525/lost-and-found-information-system-using-php-and-mysql-db-source-code-free-download.html...

itsourcecode Student Information Management System SQL注入漏洞

Student Information Management System is an itsourcecode open source student information management system. itsourcecode Student Information Management System version 1.0 SQL injection vulnerability exists , the vulnerability stems from the view.php there is an unknown function , through the...

CVE-2024-3263

CVE-2024-3263 affects YMS VIS Pro due to improper system-credentials generation and weak password policy, enabling brute-force login attempts. Public details identify affected versions as VIS Pro 3.3.0.7). There is no explicit exploitation details or public in-the-wild exploit information provide...