CVE-2024-2156

CVE-2024-2156 affects SourceCodester Best POS Management System 1.0. The vulnerability is a SQL injection in an unknown function within admin_class.php, triggered by manipulating the img argument. The issue can be exploited remotely and a public exploit exists. Multiple connected sources corrobor...

CVE-2024-2155

The CVE-2024-2155 vulnerability affects SourceCodester Best POS Management System 1.0 and involves an index.php file inclusion: manipulating the page argument enables potential inclusion of local files. Multiple connected sources confirm this is a remote-vector issue with unknown specifics about ...

CVE-2024-2154

CVE-2024-2154 affects SourceCodester Online Mobile Management Store 1.0, specifically the view_product.php file where the id parameter enables SQL injection. The vulnerability is exploitable remotely and has been disclosed publicly (VDB-255586); impact is high for confidentiality, integrity, and ...

CVE-2024-2153

CVE-2024-2153 affects SourceCodester Online Mobile Management Store 1.0, with SQL injection in the /admin/orders/view_order.php file caused by manipulation of the id parameter. Exploitation appears possible remotely and public disclosure exists (VDB-255585). Public-available sources describe the ...

Input validation

A vulnerability classified as problematic was found in SourceCodester Online Mobile Management Store 1.0. Affected by this vulnerability is an unknown functionality of the component Product Price Handler. The manipulation of the argument quantity with the input -1 leads to business logic errors...

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Online Mobile Management Store 1.0. Affected by this issue is some unknown functionality of the file /admin/product/manageproduct.php. The manipulation of the argument id leads to sql injection. The attack may be...

CVE-2023-49547

CVE-2023-49547 concerns a SQL injection in Customer Support System v1. The vulnerability exists in the login path: /customer_support/ajax.php?action=login, via the username parameter, enabling potentially unauthorized data access. The CVSS v3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H with a...

CVE-2024-27684

The vulnerability CVE-2024-27684 affects D-Link GO-RT-AC750/ GORTAC750_A1_FW_v101b03. The XSS flaw originates in the web components dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi, and seama.cgi, caused by insufficient input validation/escaping of the url parameter, allowing remote attackers to inje...

CVE-2023-49546

CVE-2023-49546 affects Customer Support System v1 . The vulnerability is a SQL injection in the email parameter of /customer_support/ajax.php, caused by lack of input validation. The CVSS v3.1 score is 8.8 (High) with network attack vector, low attack complexity, and no user interaction required;...

CVE-2024-25731

The CVE-2024-25731 entry concerns the Android app Elink Smart eSmartCam (com.cn.dq.ipc) 2.1.5. The vulnerability is a hardcoded AES encryption key in the binary, enabling an attacker who observes traffic (e.g., over Wi‑Fi) to defeat encryption and potentially access protected data. Supported deta...

openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:4057-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for procps (SUSE-SU-2023:3472-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for opensuse (openSUSE-SU-2023:0219-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-49968

The CVE-2023-49968 entry covers a SQL injection in Customer Support System v1, exploitable via the id parameter on /customer_support/manage_department.php. The issue is caused by insufficient input validation in that parameter, allowing an attacker to alter SQL query logic and potentially access ...

CVE-2024-27718

The connected Nuclei template confirms a SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200, exploitable via the /importexport.php component. The root cause is an SQL injection in that endpoint, allowing a local attacker to obtain sensitive information and escala...

CVE-2023-49548

CVE-2023-49548 affects the open-source “Customer Support System v1” and is a SQL injection vulnerability via the lastname parameter on /customer_support/ajax.php?action=save_user. The linked documents consistently describe a SQL injection that could leak data and do not provide a concrete remedia...

openSUSE: Security Advisory for indent (SUSE-SU-2023:3433-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for opera (openSUSE-SU-2022:10057-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for openvswitch (SUSE-SU-2023:4508-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for chromium (openSUSE-SU-2023:0193-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...