CVE-2024-8081: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has...

CVE-2024-42566

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password parameter at login.php...

CVE-2024-7947 SourceCodester Point of Sales and Inventory Management System login.php sql injection

A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-7947 SourceCodester Point of Sales and Inventory Management System login.php sql injection

A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-42566

CVE-2024-42566 affects the School Management System. A SQL injection flaw is present in the login.php endpoint, exploitable via the password parameter. Public sources note the vulnerability but do not provide confirmed affected versions or a fix. Impact is described as high/critical in CVE metada...

CVE-2024-42566

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password parameter at login.php...

CVE-2024-7947: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Point of Sales and Inventory Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploi...

PT-2024-30018 · Unknown · Hotel Management System

Name of the Vulnerable Software and Affected Versions: Hotel Management System version 79d688 Description: An issue in the login component, specifically in the process login.php file, allows attackers to authenticate without providing a valid password. This enables unauthorized access to the...

CVE-2024-42566: Improper Neutralization of Special Elements used in an SQL Command

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password parameter at login.php...

PT-2024-38712

Name of the Vulnerable Software and Affected Versions: SourceCodester Point of Sales and Inventory Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Point of Sales and Inventory Management System. This affects an unknown part of the file...

CVE-2024-43009: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability exists in user/login.php at line 24 in ZZCMS 2023 and earlier. The application directly inserts the value of the HTTPREFERER header into the HTML response without proper sanitization. An attacker can exploit this vulnerability by tricking a user...

CVE-2024-7681: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument email/password leads to sql injection. The attack can be initiate...

CVE-2024-7681 code-projects College Management System Login Page login.php sql injection

A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument email/password leads to sql injection. The attack can be initiate...

PT-2024-29318

Name of the Vulnerable Software and Affected Versions Kashipara Responsive School Management System version 3.2.0 Description A Reflected Cross Site Scripting XSS issue was found in the "/smsa/teacher login.php" endpoint, allowing remote attackers to execute arbitrary code via the error parameter...

PT-2024-29315

Name of the Vulnerable Software and Affected Versions Kashipara Responsive School Management System version 1.0 Description A SQL injection issue allows an attacker to execute arbitrary SQL commands via the username parameter in the "/smsa/teacher login.php" API endpoint. Recommendations For...

CVE-2024-7498: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been classified as critical. Affected is the function login/login2 of the file /admin/login.php of the component Admin Login Page. The manipulation of the argument username leads to sql injection. It is possible to...

CVE-2024-33971: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'username' in '/login.php' parameter...

CVE-2024-7449

CVE-2024-7449 affects itsourcecode Placement Management System 1.0. The login.php file contains an SQL injection in the email parameter, enabling remote exploitation. Descriptions indicate exploitation is publicly disclosed and potentially usable. Impact is described as critical with possible dat...

CVE-2024-7449: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2024-38354 · Unknown · Itsourcecode Ticket Reservation System

Name of the Vulnerable Software and Affected Versions: itsourcecode Ticket Reservation System version 1.0 Description: A critical issue was found in the itsourcecode Ticket Reservation System, affecting an unknown functionality of the file login.php of the component Login Page. The manipulation o...