CVE-2025-45542: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is vulnerable due to improper input validation, allowing attackers to inject SQL queries...

CVE-2025-45542

The CloudClassroom-PHP-Project v1.0 is vulnerable to a time-based blind remote SQL injection in its registrationform endpoint. The root cause is the improper sanitization and validation of the pass parameter, which allows an unauthenticated remote attacker to manipulate backend SQL logic, potenti...

CVE-2024-2266

A vulnerability has been found in keerti1924 Secret-Coder-PHP-Project 1.0 and classified as problematic. This vulnerability affects unknown code of the file /login.php of the component Login Page. The manipulation of the argument emailcookie/passwordcookie leads to cross site scripting. The attac...

CVE-2024-2355

A vulnerability has been found in keerti1924 Secret-Coder-PHP-Project 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /secretcoder.sql. The manipulation leads to inclusion of sensitive information in source code. The attack can be launched...

CVE-2023-23156

Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid parameter in the single-product page...

CVE-2024-57423

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...

CVE-2024-57423

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...

CVE-2024-57423

A Cross-Site Scripting (XSS) vulnerability exists in CloudClassroom-PHP Project v1.0 , a cloud classroom website. The flaw is caused by improper neutralization of input in the exid parameter of the assessment function , which may allow a remote attacker to execute arbitrary code. To mitigate this...

CVE-2024-57423: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function...

CVE-2024-48963

The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning truste...

OS Command Injection

snyk-php-plugin is vulnerable to OS Command Injection. The vulnerability is due to improper handling of the current working directory name, allowing code injection if Snyk test is run inside an untrusted PHP project...

CVE-2024-48579

SQL Injection vulnerability in Best House rental management system project in php v.1.0 allows a remote attacker to execute arbitrary code via the username parameter of the login request...

CVE-2024-48963

The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning truste...

CVE-2024-48963: Improper Neutralization of Special Elements used in an OS Command

The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning truste...

PT-2024-33300 · Snyk · Snyk Cli

Name of the Vulnerable Software and Affected Versions: Snyk CLI versions prior to 1.1294.0 Description: The issue is related to Code Injection when scanning an untrusted PHP project. It can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current...

Live Membership Management System 1.0 Code Injection

============================================================================================================================================= | Title : Live Membership Management System version 1.0 php code injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser ...

Goati Track 1.0-2023 Insecure Settings

============================================================================================================================================= | Title : Gaati track v1.0-2023 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1...

PT-2024-27800 · Unknown · Itsourcode Online Discussion Forum Project In Php With Source Code

Name of the Vulnerable Software and Affected Versions: Itsourcecode Online Discussion Forum Project in PHP with Source Code version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the email parameter in the "login.php" file...

CVE-2024-37871

A SQL injection vulnerability exists in the login.php file of the Itsourcecode Online Discussion Forum Project in PHP with Source Code version 1.0 . This flaw allows remote attackers to execute arbitrary SQL commands by exploiting the email parameter. To mitigate this risk, it is recommended to r...

Fedora: Security Advisory (FEDORA-2024-bb55f8476a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...