2 matches found
PT-2024-38620
Name of the Vulnerable Software and Affected Versions SourceCodester Clinics Patient Management System version 1.0 Description A critical issue was found in the system, affecting the file /pms/ajax/check user name.php. The manipulation of the user name argument leads to SQL injection. This issue...
7.5CVSS6.2AI score0.00452EPSS
SaveExploits1References8
CVE-2008-6785: Improper Control of Generation of Code
Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as demonstrated by creating a name.php file...
6.8CVSS6.5AI score0.03125EPSS
SaveExploits2References2
20