PHP MySQL User Signup Login System SQL Injection Vulnerability

The PHP MySQL User Signup Login System is a login and registration form using HTML, PHP and MySQL. A SQL injection vulnerability exists in version 1.0 of the PHP MySQL User Signup Login System, which originates from an SQL injection vulnerability in the email parameter of the /login.php file...

PT-2024-19580 · Unknown · Boyiddha Automated-Mess-Management-System

Name of the Vulnerable Software and Affected Versions: boyiddha Automated-Mess-Management-System version 1.0 Description: A critical vulnerability has been found in the boyiddha Automated-Mess-Management-System. The issue is related to an unknown function of the file /member/view.php, where the...

PT-2024-18915 · Sourcecodester · Sourcecodester Insurance Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Insurance Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown processing. The manipulation of the page argument leads to file inclusion. The attack may be initiated...

CVE-2024-27746

SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the index.php component...

Petrol Pump Management Software SQL Injection Vulnerability

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. Petrol Pump Management Software version v.1.0 suffers from a SQL injection vulnerability that originates from allowing an attacker to execute arbitrary code via the address parameter in the...

FAQ Management System Cross-Site Scripting Vulnerability

FAQ Management System is a FAQ management system by Remy Andrade, a personal developer. A cross-site scripting vulnerability exists in version 1.0 of the FAQ Management System, which stems from the parameter Frequently Asked Question in the component Update FAQ that causes cross-site scripting...

Petrol Pump Management Software SQL Injection Vulnerability

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A SQL injection vulnerability exists in Petrol Pump Management Software version 1.0, which originates from a SQL injection issue in the /admin/app/logincrud.php file...

Petrol Pump Management Software Cross-Site Scripting Vulnerability

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A cross-site scripting vulnerability exists in Petrol Pump Management Software version v.1.0, which originates from a vulnerability that allows an attacker to execute arbitrary code with a...

FAQ Management System SQL Injection Vulnerability

FAQ Management System is a Frequently Asked Questions Management System by Remy Andrade Personal Developer. A SQL injection vulnerability exists in version 1.0 of the FAQ Management System, which stems from the parameter faq in the file /endpoint/delete-faq.php, which can lead to SQL injection...

Block Inserter for Dynamic Content SQL Injection Vulnerability

Block Inserter for Dynamic Content is a simple web application by oretnom23 Individual Developer for inserting one or more blocks into site pages with dynamic content. A SQL injection vulnerability exists in Block Inserter for Dynamic Content version 1.0, which stems from an SQL injection issue i...

Web-Based Student Clearance System SQL Injection Vulnerability

Web-Based Student Clearance System is a web-based student clearance system by the individual developer Ndueso Okorie. A SQL injection vulnerability exists in Web-Based Student Clearance System version 1.0, which stems from an incorrect manipulation of the parameter txtpassword that can lead to sq...

Projectworlds Visitor Management System SQL Injection Vulnerability

Projectworlds Visitor Management System is a visitor access management system. It implements self-service functionality for visitors. A SQL injection vulnerability exists in Projectworlds Visitor Management System v.1.0 that could allow a remote attacker to escalate privileges via the name...

CVE-2024-25166

Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary code via the uploadfile action parameter in the controller.php file...

Simple Stock System Security Vulnerability

Simple Stock System is a simple stock system by the individual developer Carmelo Garcia. A security vulnerability exists in version 1.0 of the Simple Stock System that stems from the system's susceptibility to SQL injection attacks...

PT-2024-18426 · Unknown · Codeastro Membership Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Membership Management System version 1.0 Description: A critical issue has been found in the CodeAstro Membership Management System. The problem affects the /get membership amount.php file, where the manipulation of the...

PT-2024-18430 · Sourcecodester · Sourcecodester Web-Based Student Clearance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-Based Student Clearance System version 1.0 Description: A critical issue has been found in the Edit User Profile Page of the SourceCodester Web-Based Student Clearance System, specifically in the file /admin/edit-admin.php...

71CMS Security Breach

71CMS is xiaocheng-keji open source a smart party building system. 71CMS v.1.0.0 version has a security vulnerability. Attackers use this vulnerability to execute arbitrary code via the uploadfile parameter in the controller.php file...

PT-2024-20271 · Unknown · Code-Projects Computer Book Store

Name of the Vulnerable Software and Affected Versions: Code-projects Computer Book Store version 1.0 Description: The issue is related to SQL Injection via the PublisherID. This allows for potential unauthorized access to sensitive data. There is no information provided about the estimated number...

PT-2024-18384 · Sourcecodester · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System version 1.0 Description: A critical issue has been found, affecting an unknown function of the file /psubmit.php. The manipulation of the argument pid with the input '+or+1%3d1%23 leads to SQL...

CodeAstro Simple Voting System Access Control Error Vulnerability

CodeAstro Simple Voting System is a simple voting system from CodeAstro. An Access Control Error vulnerability exists in CodeAstro Simple Voting System version 1.0, which stems from the file users.php that causes incorrect access control...