Student Study Center Desk Management System 安全漏洞

Student Study Center Desk Management System is a student study center desk management system. A security vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which stems from a problem with the file index.php, where manipulation of the parameter page...

Online Thesis Archiving System SQL注入漏洞

Online Thesis Archiving System by Carlo Montero Individual Developer provides an online platform to store student theses or capstone projects. A SQL injection vulnerability exists in Campcodes Online Thesis Archiving System version 1.0, which stems from a problem in the file...

PT-2023-18228 · Unknown · Campcodes Online Thesis Archiving System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Thesis Archiving System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file classes/Master.php. The manipulation of the name argument leads to SQL injection...

Judging Management System SQL注入漏洞

Judging Management System is a judging management system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in the SourceCodester Judging Management System version 1.0, which is caused by an unknown function in the file editcontestant.php that results in a sql injection...

SourceCodester Complaint Management System SQL注入漏洞

Complaint Management System is a complaint management system by the individual developer Arvin Arandilla. A SQL injection vulnerability exists in SourceCodester Complaint Management System version 1.0, which stems from a problem in the file /admin/userprofile.php, where manipulation of the...

Sourcecodester Vehicle Service Management System SQL注入漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. SourceCodester Vehicle Service Management System version 1.0 SQL injection vulnerability , the vulnerability stems from the...

CVE-2023-29623

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the password parameter at /purchaseorder/classes/login.php...

Employee Performance Evaluation System 代码问题漏洞

Employee Performance Evaluation System is an employee performance evaluation system by Carlo Montero personal developer. A security vulnerability exists in Employee Performance Evaluation System v1.0. An attacker can exploit this vulnerability to execute arbitrary code via specially crafted files...

Campcodes Advanced Online Voting System 跨站脚本漏洞

Campcodes Advanced Online Voting System is an online voting system. A cross-site scripting vulnerability exists in Campcodes Advanced Online Voting System v1.0. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the parameter title of the file...

Sourcecodester Purchase Order Management System 代码问题漏洞

Sourcecodester Purchase Order Management System is a simple purchase order management system for managing the purchase order records of a particular company. A security vulnerability exists in Sourcecodester Purchase Order Management System v1.0. An attacker can exploit this vulnerability to...

CVE-2023-27667

Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability...

PT-2023-17377 · Unknown · Phpgurukul Bank Locker Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Bank Locker Management System version 1.0 Description: A critical issue has been found in the Password Reset component of the PHPGurukul Bank Locker Management System. The problem lies in an unknown function of the file recovery.ph...

PT-2023-17362 · Unknown · Phpgurukul Bp Monitoring Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul BP Monitoring Management System version 1.0 Description: A critical issue was found in the Change Password Handler component, specifically in the file change-password.php. The manipulation of the password argument leads to SQL...

Online Computer and Laptop Store 跨站脚本漏洞

Online Computer and Laptop Store is an online computer and laptop sales system. Online Computer and Laptop Store version 1.0 contains a cross-site scripting vulnerability that can be exploited by attackers to inject malicious JavaScript scripts...

PT-2023-17373 · Sourcecodester · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue affects the processing of the file /classes/Master.php?f=delete category, where the manipulation of the id argument leads to sql injection. The attack c...

Simple and Beautiful Shopping Cart System SQL注入漏洞

Simple and Beautiful Shopping Cart System is an e-commerce platform. A SQL injection vulnerability exists in SourceCodester Simple and Beautiful Shopping Cart System version 1.0, which stems from a problem in the file login.php, where manipulation of the parameters username/password can lead to s...

PT-2023-17356 · Sourcecodester · Sourcecodester Simple/Beautiful Shopping Cart System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple and Beautiful Shopping Cart System version 1.0 Description: A critical issue was found in the delete user query.php file, where the manipulation of the user id argument leads to SQL injection. The attack can be initiated...

PT-2023-20827 · Unknown · Dynamic Transaction Queuing System

Name of the Vulnerable Software and Affected Versions: Dynamic Transaction Queuing System version 1.0 Description: The issue concerns an arbitrary file upload vulnerability. It affects the "/admin/ajax.php?action=save uploads" API endpoint, allowing attackers to execute arbitrary code via a craft...

Air Cargo Management System SQL注入漏洞

Air Cargo Management System is an air cargo management system. A SQL injection vulnerability exists in SourceCodester Air Cargo Management System version 1.0, which is caused by incorrect manipulation of the parameter id resulting in sql injection...

PT-2023-17249 · Sourcecodester · Sourcecodester Simple Task Allocation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Task Allocation System version 1.0 Description: A critical issue has been found in the manage user.php file, where the manipulation of the id argument leads to sql injection. This issue can be exploited remotely. The...