CVE-2024-0351

A vulnerability classified as problematic has been found in SourceCodester Engineers Online Portal 1.0. This affects an unknown part. The manipulation leads to session fixiation. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told...

CVE-2024-9794

The CVE-2024-9794 entry concerns Codezips Online Shopping Portal 1.0, where the vulnerability resides in /update-image1.php. The issue arises when manipulating the productimage1 argument, enabling unrestricted upload. The affected component is the file handling logic in update-image1.php, with re...

CVE-2024-9038

CVE-2024-9038 affects Codezips Online Shopping Portal 1.0, specifically the insert-product.php functionality. The vulnerability arises from manipulating the productimage1/productimage2/productimage3 parameters, enabling unrestricted file upload. This remote attack has had its exploit disclosed pu...

Emergency Ambulance Hiring Portal 1.0 SQL Injection

==================================================================================================================================== | Title : Emergency Ambulance Hiring Portal 1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0...

CVE-2024-8463

File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an authenticated user to execute an RCE via webshell...

Medical Center Portal 1.0 SQL Injection

============================================================================================================================================= | Title : Medical Center Portal 1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3 ...

CVE-2024-8167

A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /forget.php. The manipulation of the argument email/mobile leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

CVE-2024-7808

A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown function of the file logindbc.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

CVE-2024-7808

CVE-2024-7808 affects code-projects Job Portal 1.0, where logindbc.php is vulnerable to SQL injection via the email parameter. The flaw allows remote exploitation and the exploit has been disclosed publicly. Connected docs corroborate the vulnerability risk, but no patch/version details are provi...

CVE-2024-7682

A vulnerability was found in code-projects Job Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file rwinat.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the publ...

CVE-2024-3085

CVE-2024-3085 affects PHPGurukul Emergency Ambulance Hiring Portal 1.0, specifically the Admin Login Page’s /admin/login.php. The vulnerability is a SQL injection in the username parameter of the login function, enabling remote exploitation and data theft. Multiple sources confirm the attack surf...

CVE-2023-41014

code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter for "Employer."...

CVE-2024-0349

Affected product: SourceCodester Engineers Online Portal 1.0. The issue is a missing secure attribute on sensitive cookies, enabling potential cookie leakage. A remote attacker could exploit this vulnerability, with attack complexity described as high and no user interaction required. Multiple so...

CVE-2024-0348

A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as problematic. Affected is an unknown function of the component File Upload Handler. The manipulation leads to resource consumption. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-0262

CVE-2024-0262 describes a cross-site scripting vulnerability in Online Job Portal 1.0 affecting the Create News Page, specifically the /Admin/News.php component. The issue arises from improper handling of the News parameter, where crafted input such as the payload “” can be injected to execute ar...

CVE-2024-0191

A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/uploads/. The manipulation leads to file and directory information exposure. It is possible to launch the attack remotely. The exploit...

CVE-2024-0190

CVE-2024-0190 affects RRJ Nueva Ecija Engineer Online Portal 1.0, specifically the Quiz Handler’s add_quiz.php. The issue is a cross-site scripting vulnerability caused by unsafely handling the Quiz Title/Quiz Description input, with a payload such as that can be provided by an attacker. The att...

Cross site scripting

A vulnerability has been found in RRJ Nueva Ecija Engineer Online Portal 1.0 and classified as problematic. This vulnerability affects unknown code of the file teachermessage.php of the component Create Message Handler. The manipulation of the argument Content with the input alertx leads to cross...

CVE-2024-0189

CVE-2024-0189 describes a cross-site scripting vulnerability in RRJ Nueva Ecija Engineer Online Portal 1.0, affecting the file teacher_message.php within Create Message Handler. The issue arises from manipulating the Content parameter with input like , enabling remote exploitation. Multiple sourc...

CVE-2024-0188

A vulnerability, which was classified as problematic, was found in RRJ Nueva Ecija Engineer Online Portal 1.0. This affects an unknown part of the file changepasswordteacher.php. The manipulation leads to weak password requirements. It is possible to initiate the attack remotely. The complexity o...