Lead Management System SQL Injection Vulnerability (CNVD-2023-05743)

Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from the lack of validation of externally entered SQL statements in the id parameter of removeLead.php, which can be exploited by attackers...

Lead Management System SQL Injection Vulnerability (CNVD-2023-05742)

Lead management system is a lead management system by Mayuri K. Personal developer. SQL injection vulnerability exists in Lead Management System v1.0, which stems from the lack of validation of externally entered SQL statements in the id parameter of removeCategories.php. An attacker could use th...

Lead Management System SQL Injection Vulnerability (CNVD-2023-05739)

Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in the customerid parameter in ajaxrepresent.php. statement in ajaxrepresent.php...

Lead Management System SQL Injection Vulnerability (CNVD-2023-05740)

Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the userid parameter of changePassword.php. An attacker could use this...

Lead Management System SQL Injection Vulnerability (CNVD-2023-05745)

Lead management system is a lead management system developed by Mayuri K. The Lead Management System v1.0 version is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the id parameter of removeProduct.php, which could be used by attackers to...

5 must-haves for K-12 cybersecurity

Over the years, cyberattacks on K-12 schools and districts have steadily increased, and in 2022 that trend only continued. In the first half of 2022 alone, the education sector saw an average of almost 2,000 attacks every week--a 114% increase compared to two years ago. The tight budgets of many...

k-10.co.uk Cross Site Scripting vulnerability OBB-3133356

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Lead Management System SQL Injection Vulnerability

Lead management system is a lead management system developed by Mayuri K. The Lead Management System version 1.0 is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the login.php parameter username, and can be exploited by attackers to The...

MEV searchers can capture slippage tolerance on pool creation

Lines of code Vulnerability details Impact In the current Caviar protocol, anybody can supply initial liquidity to a newly created pool. An LP who intends to create a new pool and add liqiduity could execute the following transactions: 1. LP transaction 1: pair = Caviar.create 2. LP transaction 2...

Canteen Management System SQL注入漏洞

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. A security vulnerability exists in Canteen Management System that stems from an incorrect manipulation of the parameter customerid resulting in sql injection...

Garage Management System Cross-Site Scripting Vulnerability

Garage Management System is a garage management system developed by Mayuri K. A cross-site scripting vulnerability exists in Garage Management System v1.0, which can be exploited by attackers to inject malicious scripts at /garage/phpaction/createBrand.php and obtain sensitive information such as...

Canteen Management System SQL注入漏洞

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. A security vulnerability exists in Canteen Management System. An attacker could exploit this vulnerability to perform a sql injection attack...

Canteen Management System 安全漏洞

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. A security vulnerability exists in Canteen Management System that stems from cross-site scripting due to incorrect manipulation of the parameter brandname...

Billing System Project getOrderReport.php SQL Injection Vulnerability

Billing System Project is a billing system project by Mayuri K. Individual developer. Billing System Project v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the endDate parameter in getOrderReport.php against an externally entered SQL statement. An attacker...

k-live.net Cross Site Scripting vulnerability OBB-3068113

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

k-g-s.kz Cross Site Scripting vulnerability OBB-3044735

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

k-products.jp Cross Site Scripting vulnerability OBB-3034673

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Garage Management System SQL注入漏洞

Garage Management System is a garage management system by Mayuri K. Individual developer. A security vulnerability exists in Garage Management System version v1.0, which was discovered to contain an SQL injection vulnerability via the id parameter of /gargare/editorder.php...

The vulnerability of the implementation of the pages/edit_fields/9_ajax/add_keyword.php script of the Digital Assets Management System ResourceSpace allows a perpetrator to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the pages/editfields/9ajax/addkeyword.php implementation of the ResourceSpace digital asset management system lies in the lack of measures taken to protect the SQL query structure during the processing of the k parameter. Exploiting this vulnerability can allow an attacker,...

Canteen Management System SQL注入漏洞

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Canteen Management System version 1.0, which stems from the userid parameter of /phpaction/fetchOrderData.php being susceptible to SQL injection...