Prison Management System SQL注入漏洞

Prison Management System is a prison management system developed by Carlo Montero. A SQL injection vulnerability exists in SourceCodester Prison Management System version 1.0, which originates in the /Admin/login.php file and allows for SQL injection attacks...

Prison Management System 代码问题漏洞

Prison Management System is a prison management system developed by Carlo Montero. A code issue exists in Prison Management System version 1.0, which is caused by an unrestricted file upload in the avatar parameter of the component Avatar Handler file in /Admin/edit-photo.php...

Prison Management System 代码问题漏洞

Prison Management System is a prison management system. A file upload vulnerability exists in Prison Management System version 1.0, which stems from a lack of validation of uploaded files in the avatar parameter of the /Admin/add-admin.php file. This vulnerability can be exploited to remotely...

CVE-2024-3437: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /Admin/add-admin.php of the component Avatar Handler. The manipulation of the argument avatar leads to unrestricted upload. The attack ma...

PT-2024-25850

Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0 Description A critical issue has been found, allowing for sql injection through an unknown function of the file /Account/login.php. This can be exploited remotely. The issue has been publicly...

CVE-2024-3441: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Employee/edit-profile.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been...

PT-2024-25862 · Unknown · Sourcecodester Prison Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A critical issue has been found in the SourceCodester Prison Management System, affecting some unknown functionality of the file /Employee/edit-profile.php. This issue leads to...

PT-2024-25839 · Sourcecodester · Sourcecodester Prison Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A critical issue affects the processing of the file /Admin/login.php, leading to sql injection. The attack may be initiated remotely. Recommendations: For SourceCodester Prison...

PT-2024-25857 · Unknown · Sourcecodester Prison Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A critical issue has been found in the SourceCodester Prison Management System, affecting an unknown functionality of the file /Admin/edit profile.php. This issue leads to sql...

CVE-2024-3439: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Account/login.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

CVE-2024-3438: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Prison Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /Admin/login.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public...

CVE-2024-3443: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Prison Management System 1.0. This vulnerability affects unknown code of the file /Employee/applyleave.php. The manipulation of the argument txtstartdate/txtenddate leads to cross site scripting. The attack can be initiated...

CVE-2024-3442: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Prison Management System 1.0. This affects an unknown part of the file /Employee/deleteleave.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

PT-2024-25872 · Sourcecodester · Sourcecodester Prison Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A critical issue has been found in the SourceCodester Prison Management System, affecting the file /Employee/delete leave.php. This issue leads to sql injection and can be...

CVE-2024-3440: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/editprofile.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has...

PT-2024-25883 · Sourcecodester · Sourcecodester Prison Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Prison Management System. This issue affects the file /Employee/apply leave.php, where the manipulation of the txtsta...

Prison Management System SQL注入漏洞

Prison Management System is a prison management system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in the SourceCodester Prison Management System version 1.0, which originates in the /Employee/edit-profile.php file and can be exploited for SQL injection attacks...

CVE-2024-3436 SourceCodester Prison Management System Avatar edit-photo.php unrestricted upload

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Admin/edit-photo.php of the component Avatar Handler. The manipulation of the argument avatar leads to unrestricted upload. The attack c...

CVE-2024-3436 SourceCodester Prison Management System Avatar edit-photo.php unrestricted upload

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Admin/edit-photo.php of the component Avatar Handler. The manipulation of the argument avatar leads to unrestricted upload. The attack c...

CVE-2024-3436

CVE-2024-3436 affects SourceCodester Prison Management System 1.0, targeting the Avatar Handler’s /Admin/edit-photo.php. The vulnerability is an unrestricted upload via manipulation of the avatar parameter, allowing remote exploitation. Multiple connected sources confirm the same issue and identi...