64 matches found
Malicious code in managment (PyPI)
Source: kam193 754c9b609bb8dafc0fd21d141cd216744d9f2aa1f23898990c52e872fdc23e1a Installing the package starts a revshell and download and starts a remote script depending on version, different malicious functionality. The name seems to imitate CPAN.org --- Category: MALICIOUS - The campaign has...
CVE-2024-4428
Missing Authentication for Critical Function, Missing Authorization vulnerability in Menulux Information Technologies Managment Portal allows Collect Data as Provided by Users. This issue affects Managment Portal: through 21.05.2024...
CVE-2024-4428 Sensetive Data Exposure in Menulux Managment Portal
Missing Authentication for Critical Function, Missing Authorization vulnerability in Menulux Information Technologies Managment Portal allows Collect Data as Provided by Users. This issue affects Managment Portal: through 21.05.2024...
CVE-2024-4428
CVE-2024-4428 affects Menulux Information Technologies Managment Portal. The issue is a Missing Authentication for Critical Function / Missing Authorization vulnerability in the portal, enabling collection of data provided by users due to improper access control. Affected status and remediation d...
CVE-2024-4428: Missing Authentication for Critical Function
Missing Authentication for Critical Function, Missing Authorization vulnerability in Menulux Information Technologies Managment Portal allows Collect Data as Provided by Users. This issue affects Managment Portal: through 21.05.2024...
CVE-2024-5683: Improper Control of Generation of Code
Improper Control of Generation of Code 'Code Injection' vulnerability in Next4Biz CRM & BPM Software Business Process Manangement BPM allows Remote Code Inclusion. This issue affects Business Process Manangement BPM: from 6.6.4.4 before 6.6.4.5...
CVE-2024-25213
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...
CVE-2024-25213
CVE-2024-25213 affects the Employee Management System v1.0, where a SQL injection vulnerability exists in the SQL query executed via the id parameter on the endpoint /edit.php . The root cause is a lack of proper input handling leading to possible data disclosure, modification, or corruption; the...
CVE-2024-25214
An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html...
CVE-2024-25212: Improper Neutralization of Special Elements used in an SQL Command
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php...
CVE-2024-25214: Improper Neutralization of Special Elements used in an SQL Command
An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html...
CVE-2024-25215: Improper Neutralization of Special Elements used in an SQL Command
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...
CVE-2024-25216: Improper Neutralization of Special Elements used in an SQL Command
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php...
PT-2024-20826
Name of the Vulnerable Software and Affected Versions Employee Managment System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the mailud parameter at the "/aprocess.php" API endpoint. Recommendations For Employee Managment...
Employee Managment System SQL Injection Vulnerability
Employee Managment System is an employee management system. An SQL injection vulnerability exists in Employee Managment System v1.0, which originates from a SQL injection vulnerability in the file /edit.php...
CVE-2024-25214
An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html...
CVE-2024-25213: Improper Neutralization of Special Elements used in an SQL Command
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php...
CVE-2024-25318
Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'pid' parameter in Hotel/admin/print.php?pid=2...
