199 matches found
CVE-2024-29387
CVE-2024-29387 affects Projeqtor up to version 11.2.0 with a remote code execution (RCE) vulnerability reported via the /view/print.php component. Multiple sources (NVD, Red Hat) describe RCE risk; one source (CNNVD) reports an SQL injection variant in the same component, indicating potential inc...
Sql injection
Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'pid' parameter in Hotel/admin/print.php?pid=2...
CVE-2024-0460 code-projects Faculty Management System student-print.php sql injection
A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/pages/student-print.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...
Cross site scripting
POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...
CVE-2023-36346
POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...
CVE-2023-36346
POS Codekop v2.0 has a reflected XSS vulnerability in the print.php endpoint through the nm_member parameter. Affects the web application’s print.php handling, enabling injection of script code that could be executed in users’ browsers. The Nuclei template and Red Hat/NVD references confirm the i...
CVE-2023-36346
POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...
Cross site scripting
Cross site scripting XSS vulnerability in sourcecodester oretnom23 sales management system 1.0, allows attackers to execute arbitrary code via the productname and productprice inputs in file print.php...
CVE-2023-23026
Cross site scripting XSS vulnerability in sourcecodester oretnom23 sales management system 1.0, allows attackers to execute arbitrary code via the productname and productprice inputs in file print.php...
Reflected XSS on msg Parameter
Description Hello Team, Hope you're doing well, There is no sanitization for the user input in msg parameter on the print.php file. Proof of Concept for some reason, I don't know why I can't prove the vulnerability on demo.bumsys.org but here is the PoC payload is:...
CVE-2022-43329
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php...
Sql injection
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php...
CVE-2022-43329
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php...
CVE-2022-43329
CVE-2022-43329 corresponds to a SQL injection in Canteen Management System v1.0, exploitable via the id parameter on /print.php. The vulnerability affects confidentiality, integrity, and availability (CVSS v3.1 base score 7.2; AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The connected data confirms the ...
CVE-2022-43329
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php...
Garage Management System SQL Injection Vulnerability (CNVD-2022-62232)
Garage Management System Cms-Website is a garage management system. A SQL injection vulnerability exists in Garage Management System v1.0, which stems from a lack of validation of externally entered SQL statements in the id parameter of /print.php. An attacker could use this vulnerability to...
Design/Logic Flaw
An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all existing orders...
CVE-2022-36638
An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all existing orders...
CVE-2022-36638
CVE-2022-36638 affects Garage Management System v1.0, specifically the print.php component. The underlying issue is an access control flaw that allows unauthenticated attackers to read data for all existing orders. This is confirmed across multiple sources in the connected documents, which consis...
