PT-2024-15458 · Unknown · Kashipara Dynamic Lab Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Dynamic Lab Management System versions up to 1.0 Description: A critical vulnerability has been found in the Kashipara Dynamic Lab Management System. The issue affects unknown code in the file login process.php. The manipulation of...

CVE-2024-0278

A vulnerability, which was classified as critical, has been found in Kashipara Food Management System up to 1.0. This issue affects some unknown processing of the file partylisteditsubmit.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

Kashipara Food Management System 跨站脚本漏洞

Kashipara Food Management System is a food management system from Kashipara. A cross-site scripting vulnerability exists in version 1.0 of the Kashipara Food Management System, which stems from the lack of effective filtering and escaping of user-supplied data in the partyname parameter of the...

PHPGurukul Hospital Management System Cross-Site Scripting Vulnerability

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. A cross-site scripting vulnerability exists in PHPGurukul Hospital Management System version 1.0, which originates in the component Contact Form, index.phpcontactus, which contains an unknown section that...

Clinic Queuing System Security Vulnerability

Clinic Queuing System is a clinic queuing system by the individual developer Carlo Montero. A security vulnerability exists in Clinic Queuing System version 1.0, which stems from an authorization bypass due to misuse of the parameter formToken...

PT-2024-15444 · Unknown · Kashipara Food Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Food Management System version 1.0 Description: A vulnerability was found in the processing of the file party submit.php, where the manipulation of the party address argument leads to cross-site scripting. The attack may be initiate...

PT-2024-15449 · Unknown · Kashipara Food Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Food Management System version 1.0 Description: A critical vulnerability was found in the Kashipara Food Management System, affecting the file stock entry submit.php. The manipulation of the itemype argument leads to SQL injection...

PT-2024-15422 · Unknown · Online Job Portal

Name of the Vulnerable Software and Affected Versions: Online Job Portal version 1.0 Description: A problematic issue was found in the Create News Page component, specifically in the /Admin/News.php file. The manipulation of the News argument with malicious input, such as alert0x00C57D, leads to...

PT-2024-15425 · Sourcecodester · Sourcecodester Clinic Queuing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinic Queuing System version 1.0 Description: A critical issue affects the processing of the file /index.php, specifically the component GET Parameter Handler. The manipulation of the page argument leads to file inclusion. Thi...

CVE-2023-49633

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'buyeraddress' parameter of the buyerdetailsubmit.php resource does not validate the characters received and they are sent unfiltered to the database...

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in the v1.0 version of Kashipara Billing Software, which originates when the custmerdetails parameter of the submitmateriallist.php page is processed without filtering the data and sending it t...

PT-2024-13774 · Billing · Billing

Name of the Vulnerable Software and Affected Versions: Billing Software version 1.0 Description: The issue is related to multiple Unauthenticated SQL Injection vulnerabilities. The customer details parameter of the "buyer invoice submit.php" resource does not validate the characters received, and...

PT-2024-13982 · Unknown · Travel Website

Name of the Vulnerable Software and Affected Versions: Travel Website version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the city parameter of the "hotelSearch.php" resource does not validate the characters received, and they are sent...

Online Notice Board System SQL Injection Vulnerability

Online Notice Board System is an online bulletin board system. A SQL injection vulnerability exists in Online Notice Board System v1.0, which occurs when the dd parameter of the registration.php page is processed without filtering and sent to the database for processing...

Online College Library System SQL Injection Vulnerability

Online College Library System is an online college library system. A SQL injection vulnerability exists in Online College Library System version 1.0, which originates from a security issue in the /admin/bookadd.php page...

Online College Library System Security Breach

Online College Library System is an online college library system. A security vulnerability exists in version 1.0 of the Online College Library System, which stems from a security issue in the /admin/categoryrow.php page...

IPAddress security vulnerability

IPAddress is a Java library for working with IP addresses. A security vulnerability exists in IPAddress version v5.1.0, which stems from a security issue in the component IPAddressBitsDivision that causes an infinite loop...

Client Details System Cross-Site Scripting Vulnerability

Client Details System is a management platform. A cross-site scripting vulnerability exists in code-projects Client Details System version 1.0, which stems from the parameter fname/lname/email/contact in the file /admin/regester.php that causes cross-site scripting...

Engineers Online Portal Cross-Site Scripting Vulnerability

Engineers Online Portal is open source an online portal . It is developed using PHP, MySQL database, HTML, CSS, Javascript, jQuery, Ajax, Bootstrap and some other libraries. A cross-site scripting vulnerability exists in SourceCodester Engineers Online Portal version 1.0, which stems from the...

PT-2023-8288 · Sourcecodester · Sourcecodester Free/Open Source Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Free and Open Source Inventory Management System version 1.0 Description: The issue is related to the lack of protection against SQL query structure exploitation in the /ample/app/action/edit product.php file of the Free and Op...