SourceCodester Best Courier Management System SQL Injection Vulnerability

Best Courier Management System is a courier management system by Mayuri K. Individual developer. SourceCodester Best Courier Management System version 1.0 suffers from a SQL injection vulnerability that stems from a parameter email in the file editparcel.php that can lead to sql injection...

PT-2023-31990 · Unknown · Sourcecodester Best Courier Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Courier Management System version 1.0 Description: A critical issue has been found in the SourceCodester Best Courier Management System. It affects an unknown function of the file parcel list.php, specifically the componen...

SourceCodester Best Courier Management System SQL Injection Vulnerability

Best Courier Management System is a courier management system by Mayuri K. Individual developer. SourceCodester Best Courier Management System version 1.0 suffers from a SQL injection vulnerability that stems from a parameter id in the file viewparcel.php that can lead to sql injection...

Best Courier Management System SQL Injection Vulnerability

Best Courier Management System is a courier management system by Mayuri K. Individual developer. An injection vulnerability exists in Best Courier Management System version 1.0, which stems from a parameter s in the file parcellist.php that can lead to sql injection...

Projectworlds Online Movie Ticket Booking System SQL Injection Vulnerability

Projectworlds Online Movie Ticket Booking System is an online movie ticket booking system from Projectworlds India. Projectworlds Online Movie Ticket Booking System v1.0 suffers from a SQL injection vulnerability that originates from characters that are not validated as received and are sent to t...

Symantec Protection Engine Security Vulnerability

Symantec Protection Engine is a malware protection platform from Symantec USA. A security vulnerability exists in Symantec Protection Engine versions prior to 9.1.0, which stems from a hash disclosure vulnerability...

CVE-2023-43458

Cross Site Scripting XSS vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the room, name, and description parameters in the manageroom function...

Service Provider Management System Security Vulnerability

Service Provider Management System is a web-based application developed by Carlo Montero, an individual developer. It is designed to provide dynamic web sites for service provider companies. A security vulnerability exists in Service Provider Management System version v.1.0 that originates from a...

PT-2023-27999 · Unknown · Zoo Management System

Name of the Vulnerable Software and Affected Versions: Zoo Management System version 1.0 Description: A stored cross-site scripting XSS vulnerability in the Add Animal Details function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description of...

CVE-2023-38718

IBM Robotic Process Automation 21.0.0 through 21.0.7.8 could disclose sensitive information from access to RPA scripts, workflows and related data. IBM X-Force ID: 261606...

PT-2023-26382 · Minitool · Minitool Movie Maker

Name of the Vulnerable Software and Affected Versions: MiniTool Movie Maker versions 6.1.0 through 7.0 Description: The issue is related to an insecure installation process in MiniTool Movie Maker, which allows attackers to achieve remote code execution through a man-in-the-middle attack...

AC Repair and Services System Cross-Site Scripting Vulnerability

AC Repair and Services System is an air conditioning repair and services system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in AC Repair and Services System version 1.0, which stems from a cross-site scripting XSS vulnerability in the parameters...

PT-2023-31521 · Sourcecodester · Simple Membership System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Membership System version 1.0 Description: A critical issue was found in the Simple Membership System, affecting an unknown functionality of the file club validator.php. The manipulation of the club argument leads to SQL...

Food Ordering website SQL Injection Vulnerability

Food Ordering website is a food ordering website. A SQL injection vulnerability exists in Food Ordering Website version 1.0, which stems from some unknown processing in categoryfood.php that causes sql injection via the parameter id...

Yepas Digital Yepas Access Control Error Vulnerability

Yepas Digital Yepas is an online trading portal from Yepas Digital. A security vulnerability exists in versions of Yepas Digital Yepas prior to 1.0.1, which stems from a vulnerability that allows an attacker to bypass authentication using an alternate path or channel...

WordPress Plugin Booster for WooCommerce Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2023-40784

DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/modulemake.php...

WordPress plugin Lock User Account Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

Cleaning Business Software Security Vulnerability

Cleaning Business Software is an open source cleaning business software by PHPJabbers. PHPJabbers Cleaning Business Software version 1.0 has a security vulnerability , the vulnerability stems from the user password is not encrypted , an attacker can access all user accounts...

Take-Note App Cross-Site Request Forgery Vulnerability

Take-Note App is a note-taking application by the individual developer Remy Andrade. A cross-site request forgery vulnerability exists in Take-Note App version 1.0. An attacker can exploit this vulnerability to perform cross-site request forgery attacks...