PHPGurukul Online Notes Sharing System Code Issue Vulnerability

PHPGurukul Online Notes Sharing System is an online notes sharing system from PHPGurukul Inc. A code issue vulnerability exists in version 1.0 of the PHPGurukul Online Notes Sharing System that stems from allowing unrestricted uploads of any file...

Projectworlds Leave Management System Project SQL Injection Vulnerability

Projectworlds Leave Management System Project is a leave management system project by Projectworlds India. A SQL injection vulnerability exists in Projectworlds Leave Management System Project v1.0, which stems from the "setearnleave" parameter of admin/setleaves.php not validating incoming...

PT-2023-31286 · Unknown · Job Portal

Name of the Vulnerable Software and Affected Versions: Job Portal version 1.0 Description: The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the txtDesc parameter of the "Employer/InsertJob.php" resource does not validate the characters received, and they are sent...

PT-2023-31291 · Unknown · Job Portal

Name of the Vulnerable Software and Affected Versions: Job Portal version 1.0 Description: The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the txtDate parameter of the "Employer/InsertWalkin.php" resource does not validate the characters received, and they are sen...

PT-2023-31292 · Unknown · Job Portal

Name of the Vulnerable Software and Affected Versions: Job Portal version 1.0 Description: The issue concerns unauthenticated SQL Injection vulnerabilities. Specifically, the txtDesc parameter of the "Employer/InsertWalkin.php" resource does not validate the characters received, sending them...

CVE-2023-50985

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the lanGw parameter in the lanCfgSet function...

CVE-2023-50639

Cross Site Scripting XSS vulnerability in CuteHttpFileServer v.1.0 and v.2.0 allows attackers to obtain sensitive information via the file upload function in the home page...

CVE-2023-48434

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the regaction.php resource does not validate the characters received and they are sent unfiltered to the database...

CuppaCMS Security Vulnerability

CuppaCMS is a content management system CMS. A security vulnerability exists in CuppaCMS version V1.0, which originates from a SQL injection vulnerability in the file components/tablemanager/html/editadmintable.php...

Student Information System SQL Injection Vulnerability

Student Information System is a web-based application platform by Carlo Montero, a personal developer. It can help a university or college to manage student information and academic records. A SQL injection vulnerability exists in Student Information System v1.0, which stems from a coursecode...

CVE-2023-6894

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASEHIK. It has been classified as problematic. This affects an unknown part of the file access/html/system.html of the component Log File Handler. The manipulation leads to information disclosure. The exploit has...

PT-2023-32807 · Sourcecodester · Sourcecodester Best Courier Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Courier Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file manage user.php. The manipulation of the id argument leads to sql injection. The...

PT-2023-31398 · Unknown · Custom Login

Name of the Vulnerable Software and Affected Versions: Custom Login versions through 4.1.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 4.1.0, update...

PT-2023-7891 · Sap · Sap Btp Security Services Integration Library +1

Name of the Vulnerable Software and Affected Versions: SAP BTP Security Services Integration Library Python sap-xssec versions = 4.1.0 It is recommended to upgrade to the latest released version to ensure the issue is fully resolved. No workarounds are available for this issue...

Teacher Subject Allocation Management System Security Vulnerability

Teacher Subject Allocation Management System is a teacher subject allocation management system. A security vulnerability exists in Teacher Subject Allocation Management System version 1.0, which originates from a cross-site request forgery CSRF vulnerability in the file /admin/subject.php...

CVE-2023-4122

Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application...

Best Courier Management System 跨站脚本漏洞

Best Courier Management System is a courier management system. A cross-site scripting vulnerability exists in Best Courier Management System v.1.0, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by a remote attacker to execu...

CVE-2023-45083

An Improper Privilege Management vulnerability exists in HyperCloud that will impact the ability for a user to authenticate against the management plane. An authenticated admin-level user may be able to delete the "admin" or "serveradmin" users, which prevents authentication from subsequently...

PT-2023-32675 · Sourcecodester · Sourcecodester User Registration/Login System

Name of the Vulnerable Software and Affected Versions: SourceCodester User Registration and Login System version 1.0 Description: A problematic issue was found in the system, affecting an unknown function of the file /endpoint/delete-user.php. The manipulation of the user argument leads to...

CVE-2023-6418

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via videos.php in the id parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all th...