CVE-2024-11649

Summary of CVE-2024-11649 : Affects 1000 Projects Beauty Parlour Management System 1.0. The vulnerability is in the admin script /admin/search-appointment.php where manipulation of the searchdata argument causes an SQL injection. The issue can be triggered remotely and the exploit has been disclo...

CVE-2024-11647

A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack may be...

CVE-2024-11648

A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-customer.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-11647

The CVE-2024-11647 issue affects 1000 Projects Beauty Parlour Management System v1.0. The vulnerability lies in /admin/view-appointment.php, where manipulating the viewid parameter allows SQL injection. Descriptions note remote exploitation and that the exploit has been publicly disclosed. Connec...

1000 Projects Beauty Parlour Management System SQL注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. A SQL injection vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which is caused by an SQL injection into the parameter viewid...

RHEL 8 : RHOSP 17.1.4 (openstack-tripleo-common and python-tripleoclient) (RHSA-2024:9991)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9991 advisory. Python library for code used by TripleO projects a Python TripleOClient for Openstack Director Security Fixes: RHOSP Director Disables TLS Verificati...

RHEL 9 : RHOSP 17.1.4 (openstack-tripleo-common and python-tripleoclient) (RHSA-2024:9990)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9990 advisory. Python library for code used by TripleO projects a Python TripleOClient for Openstack Director Security Fixes: RHOSP Director Disables TLS Verificati...

PT-2024-17170 · Code Projects · Code-Projects Farmacia

Name of the Vulnerable Software and Affected Versions: code-projects Farmacia version 1.0 Description: A vulnerability was found in the file usuario.php, where the manipulation of the name argument leads to cross-site scripting. It is possible to initiate the attack remotely. Other parameters mig...

CVE-2024-11646 1000 Projects Beauty Parlour Management System edit-services.php sql injection

A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit-services.php. The manipulation of the argument sername leads to sql injection. The attack can be launched...

CVE-2024-11632

A vulnerability was found in code-projects Simple Car Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file /bookcar.php. The manipulation of the argument fname/idno/gender/email/phone/location leads to sql injection. It is possible to launch the attac...

CVE-2024-11632 code-projects Simple Car Rental System book_car.php sql injection

A vulnerability was found in code-projects Simple Car Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file /bookcar.php. The manipulation of the argument fname/idno/gender/email/phone/location leads to sql injection. It is possible to launch the attac...

Code-Projects Simple Car Rental System 注入漏洞

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. An injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from incorrect manipulation of the parameters fname, idno, gender, email, phone, and location can...

CVE-2024-11592

A vulnerability has been found in 1000 Projects Beauty Parlour Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/about-us.php. The manipulation of the argument pagetitle leads to sql injection. The attack can be initiated remotely. The...

CVE-2024-11592

CVE-2024-11592 affects 1000 Projects Beauty Parlour Management System 1.0. The vulnerability is a SQL injection in the unknown code path of /admin/about-us.php triggered by manipulating the pagetitle parameter. It is remotely exploitable and has been publicly disclosed. Multiple connected sources...

CVE-2024-11591 1000 Projects Beauty Parlour Management System add-services.php sql injection

A vulnerability, which was classified as critical, was found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/add-services.php. The manipulation of the argument sername leads to sql injection. It is possible to initiate the attack remotely. Th...

1000 Projects Beauty Parlour Management System 安全漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. A security vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which stems from an incorrect manipulation of the parameter sername that can result i...

BIT-HARBOR-2022-31669 Harbor fails to validate the user permissions when updating tag immutability policies

Harbor fails to validate the user permissions when updating tag immutability policies. By sending a request to update a tag immutability policy with an id that belongs to a project that the currently authenticated user doesn’t have access to, the attacker could modify tag immutability policies...

BIT-HARBOR-2022-31670 Harbor fails to validate the user permissions when updating tag retention policies

Harbor fails to validate the user permissions when updating tag retention policies. By sending a request to update a tag retention policy with an id that belongs to a project that the currently authenticated user doesn’t have access to, the attacker could modify tag retention policies configured...

CVE-2024-11258

A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has bee...

CVE-2024-11257

A vulnerability classified as critical has been found in 1000 Projects Beauty Parlour Management System 1.0. This affects an unknown part of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The...