13 matches found
CVE-2026-46420
setup-php is a GitHub action to set up PHP with extensions, php.ini configuration, coverage drivers, and tools. From 2.25.0 prior to 2.37.1, shivammathur/setup-php resolves the PHP version from repository-controlled files such as .php-version, composer.lock through platform-overrides.php, and...
EUVD-2026-25988
A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function deletecart of the file /admin/ajax.php?action=deletecart. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2022-44279
Garage Management System v1.0 is vulnerable to Cross Site Scripting XSS via /garage/phpaction/createBrand.php...
PT-2024-25114 · Thinksaas · Thinksaas
Name of the Vulnerable Software and Affected Versions: ThinkSAAS version 3.7.0 Description: A stored cross-site scripting XSS vulnerability in the component /action/anti.php allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the word parameter...
PT-2023-18885
Name of the Vulnerable Software and Affected Versions Canteen Management System version 1.0 Description The issue allows for SQL Injection via the "/php action/getOrderReport.php" API endpoint. Recommendations For Canteen Management System version 1.0, consider restricting access to the "/php...
Sql injection
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the productId parameter at /phpaction/fetchSelectedfood.php...
PT-2022-26821
Name of the Vulnerable Software and Affected Versions Canteen Management System version 1.0 Description The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability. This is achievable through the "/youthappam/php...
PT-2022-26807
Name of the Vulnerable Software and Affected Versions Canteen Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the userid parameter at the "/php action/fetchOrderData.php" API endpoint. Recommendations For...
Code injection
Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/phpaction/editProductImage.php?id=1...
CVE-2022-38877
Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/phpaction/editProductImage.php?id=1...
PT-2022-17506
Name of the Vulnerable Software and Affected Versions SourceCodester Garage Management System version 1.0 Description A critical issue has been found in the processing of the file /php action/createUser.php, leading to improper access controls. The attack may be initiated remotely. Recommendation...
PT-2022-20365
Name of the Vulnerable Software and Affected Versions Pharmacy Management System version 1.0 Description The issue allows attackers to execute arbitrary code via a crafted image file, exploiting a remote code execution vulnerability in the /php action/editProductImage.php component. Recommendatio...