CVE-2024-29387

projeqtor up to 11.2.0 was discovered to contain a remote code execution RCE vulnerability via the component /view/print.php...

Sql injection

Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'pid' parameter in Hotel/admin/print.php?pid=2...

CVE-2024-0460 code-projects Faculty Management System student-print.php sql injection

A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/pages/student-print.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

Cross site scripting

POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...

CVE-2023-36346

POS Codekop v2.0 has a reflected XSS vulnerability in the print.php endpoint through the nm_member parameter. Affects the web application’s print.php handling, enabling injection of script code that could be executed in users’ browsers. The Nuclei template and Red Hat/NVD references confirm the i...

CVE-2023-36346

POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...

CVE-2023-36346

POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...

Cross site scripting

Cross site scripting XSS vulnerability in sourcecodester oretnom23 sales management system 1.0, allows attackers to execute arbitrary code via the productname and productprice inputs in file print.php...

CVE-2023-23026

Cross site scripting XSS vulnerability in sourcecodester oretnom23 sales management system 1.0, allows attackers to execute arbitrary code via the productname and productprice inputs in file print.php...

Reflected XSS on msg Parameter

Description Hello Team, Hope you're doing well, There is no sanitization for the user input in msg parameter on the print.php file. Proof of Concept for some reason, I don't know why I can't prove the vulnerability on demo.bumsys.org but here is the PoC payload is:...

CVE-2022-43329

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php...

Sql injection

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php...

CVE-2022-43329

CVE-2022-43329 corresponds to a SQL injection in Canteen Management System v1.0, exploitable via the id parameter on /print.php. The vulnerability affects confidentiality, integrity, and availability (CVSS v3.1 base score 7.2; AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The connected data confirms the ...

CVE-2022-43329

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php...

CVE-2022-43329

Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php...

Garage Management System SQL Injection Vulnerability (CNVD-2022-62232)

Garage Management System Cms-Website is a garage management system. A SQL injection vulnerability exists in Garage Management System v1.0, which stems from a lack of validation of externally entered SQL statements in the id parameter of /print.php. An attacker could use this vulnerability to...

Design/Logic Flaw

An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all existing orders...

CVE-2022-36638

CVE-2022-36638 affects Garage Management System v1.0, specifically the print.php component. The underlying issue is an access control flaw that allows unauthenticated attackers to read data for all existing orders. This is confirmed across multiple sources in the connected documents, which consis...

CVE-2022-36638

An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all existing orders...

CVE-2022-36636

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php...