SourceCodester Online Discussion Forum Site SQL注入漏洞

SourceCodester Online Discussion Forum Site is an application from SourceCodester, Inc. An online discussion forum. A SQL injection vulnerability exists in Online Discussion Forum Site version 1.0, which stems from an incorrect manipulation of the parameter id resulting in sql injection...

PT-2023-23341 · Sourcecodester · Sourcecodester Online Discussion Forum Site

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Discussion Forum Site version 1.0 Description: A critical issue was found in the file admincategoriesmanage category.php, where the manipulation of the id argument leads to sql injection. This issue can be exploited...

PT-2023-23348 · Sourcecodester · Sourcecodester Online Discussion Forum Site

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Discussion Forum Site version 1.0 Description: A critical issue has been found in the software, affecting the file admincategoriesview category.php. The manipulation of the id argument leads to SQL injection. The attack...

Faculty Evaluation System 代码问题漏洞

Faculty Evaluation System is a faculty evaluation system by the individual developer Carlo Montero. A security vulnerability exists in version 1.0 of the Sourcecodester Faculty Evaluation System, which originates from an arbitrary code execution vulnerability in ip/eval/ajax.php...

Enrollment System Project SQL注入漏洞

Enrollment System Project is an enrollment system project by Carlo Montero Individual Developer. A security vulnerability exists in version 1.0 of Enrollment System Project that stems from the presence of a SQL injection vulnerability...

Agro-School Management System SQL注入漏洞

Agro-School Management System is an agricultural school management system. A SQL injection vulnerability exists in Agro-School Management System version 1.0, which stems from a problem with the function doUpdateQuestion in the file btnfunctions.php, where manipulation of the parameter questionid...

PT-2023-22799 · Sourcecodester · Sourcecodester Online Exam Form Submission

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A critical issue was found in the file /admin/update s6.php, where the manipulation of the id argument leads to SQL injection. This issue can be exploited remotely...

CVE-2023-2909

EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below...

CVE-2021-31233

SQL Injection vulnerability found in Fighting Cock Information System v.1.0 allows a remote attacker to obtain sensitive information via the editbreed.php parameter...

Student Management System 授权问题漏洞

Student Management System is a simple web-based student management software from Sk.Amir Hamza, an individual developer in Bangladesh. An authorization issue vulnerability exists in Student Management System version 1.0, which stems from an incorrect manipulation of the parameter sid that can lea...

PT-2023-22564 · Sourcecodester · Sourcecodester Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A vulnerability was found in the Manage User Page component, specifically affecting the "admin/?page=user/manage user" endpoint. The issue arises from the manipulation ...

ASUSTOR Data Master 路径遍历漏洞

ASUSTOR Data Master is an operating system exclusively on the ASUSTOR NAS from China's ASUS, featuring a tablet-like graphical interface comparable to a zero-learning curve, making it easy to get started right away. A security vulnerability exists in ASUSTOR Data Master ADM that stems from an...

Local Services Search Engine Management System 跨站脚本漏洞

Local Services Search Engine Management System is a local services search engine management system. A cross-site scripting vulnerability exists in Local Services Search Engine Management System version 1.0, which stems from an incorrect manipulation of the parameter areaa that can lead to...

Simple Chat System SQL注入漏洞

Simple Chat System is a simple chat system by nurhodelta17 individual developer. A SQL injection vulnerability exists in Simple Chat System version 1.0, which stems from an incorrect manipulation of the parameter convoid that can lead to sql injection...

Train Station Ticketing System SQL注入漏洞

Train Station Ticketing System is a Train Station Ticketing System by Carlo Montero Individual Developer. A SQL injection vulnerability exists in Train Station Ticketing System version 1.0, which is caused by incorrect manipulation of the parameter id...

Students Online Internship Timesheet System 跨站脚本漏洞

Students Online Internship Timesheet System is an online internship timesheet system for students by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in Students Online Internship Timesheet System version 1.0, which stems from an incorrect manipulation of the...

HUAWEI EMUI/Magic UI 安全漏洞

Huawei EMUI and Huawei Magic UI are both products of Huawei, a Chinese company.Huawei EMUI is a mobile operating system based on Android.Huawei Magic UI is a smart device operating system. A security vulnerability exists in HUAWEI EMUI/Magic UI.The vulnerability stems from a lack of length...

PT-2023-24344 · Unknown · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Faculty Evaluation System version 1.0 Description: The issue allows for arbitrary code execution via the "/eval/ajax.php?action=save user" API endpoint. This could potentially lead to unauthorized access and control of the...

PT-2023-23448 · Sourcecodester · Sourcecodester Employee/Visitor Gate Pass Logging System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description: The issue is related to SQL Injection via the /employee gatepass/classes/Login.php endpoint. This allows for potential exploitation. Recommendations: For...

MOXA MXsecurity 信任管理问题漏洞

MOXA MXsecurity is a management platform from China-based MOXA. It provides centralized visibility and security management to easily monitor and identify network threats and prevent security misconfigurations to create a robust threat defense. A security vulnerability exists in MOXA MXsecurity...