8 matches found
CVE-2024-27747
File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component...
CVE-2024-27743: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the Address parameter in the addinvoices.php component...
CVE-2024-27743
Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the Address parameter in the addinvoices.php component...
CVE-2024-27747
File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component...
CVE-2024-27747: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component...
CVE-2024-27744: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the image parameter in the profile.php component...
CVE-2024-27746: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the index.php component...
PT-2024-22021
Name of the Vulnerable Software and Affected Versions Petrol Pump Mangement Software version 1.0 Description The issue allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the "index.php" component. This enables the attacker to inject malicious SQL...