5737 matches found
Code-Projects E-Health Care System SQL注入漏洞
Code-Projects E-Health Care System is a Code-Projects open source e-health care system. A SQL injection vulnerability exists in Code-Projects E-Health Care System version 1.0, which stems from the parameter email/adminpswd in the file /Admin/adminlogin.php that can lead to SQL injection...
Code-Projects E-Health Care System SQL注入漏洞
Code-Projects E-Health Care System is a Code-Projects open source e-health care system. A SQL injection vulnerability exists in Code-Projects E-Health Care System version 1.0, which stems from the parameter fname in the file /Users/registration.php that can lead to SQL injection...
Code-Projects E-Health Care System SQL注入漏洞
Code-Projects E-Health Care System is an e-health care system from Code-Projects open source. A SQL injection vulnerability exists in Code-Projects E-Health Care System version 1.0 and earlier, which stems from the parameter consultingid in the file /Admin/consultingdetail.php that can lead to SQ...
PT-2024-16496 · Unknown · Code-Projects Restaurant Order System
Name of the Vulnerable Software and Affected Versions: code-projects Restaurant Order System version 1.0 Description: A critical issue was found in the code-projects Restaurant Order System, affecting some unknown functionality of the file /login.php. The manipulation of the uid argument leads to...
CVE-2024-10700 code-projects University Event Management System submit.php sql injection
A vulnerability was found in code-projects University Event Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file submit.php. The manipulation of the argument name/email/title/Year/gender/fromdate/todate/people leads to sql injection. The...
CVE-2024-10699 code-projects Wazifa System logincontrol.php sql injection
A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknown part of the file /controllers/logincontrol.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit h...
zero-day
Zero-Day Vulnerabilities in Open-Source Projects This reposi...
PT-2024-16473 · Unknown · Code-Projects Wazifa System
Name of the Vulnerable Software and Affected Versions: code-projects Wazifa System version 1.0 Description: A critical issue was found in the code-projects Wazifa System, affecting an unknown part of the file /controllers/logincontrol.php. The manipulation of the username argument leads to SQL...
Code-Projects University Event Management System SQL注入漏洞
Code-Projects University Event Management System is an open source university event management system from Code-Projects. Code-Projects University Event Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from the parameter...
Code-Projects Simple Car Rental System SQL注入漏洞
Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A SQL injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from the parameter fname in the file /signup.php that can lead to SQL injection...
CVE-2024-37411
Missing Authorization vulnerability in Progress Planner Progress Planner progress-planner.This issue affects Progress Planner: from n/a through = 0.9.1...
CVE-2024-37411 WordPress Progress Planner plugin <= 0.9.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Team Emilia Projects Progress Planner allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Progress Planner: from n/a through 0.9.1...
CVE-2024-37411
CVE-2024-37411 describes a Missing Authorization vulnerability in the WordPress plugin Progress Planner. Concrete details in connected sources identify a Broken Access Control issue, affecting Progress Planner versions from n/a through 0.9.1 (
CVE-2024-10608 code-projects Courier Management System login.php sql injection
A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has be...
CVE-2024-10608 code-projects Courier Management System login.php sql injection
A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has be...
PT-2024-27531 · Unknown · Team Emilia Projects Progress Planner
Name of the Vulnerable Software and Affected Versions: Team Emilia Projects Progress Planner versions 0.9.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions...
CVE-2024-10605 code-projects Blood Bank Management System request.php cross-site request forgery
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /file/request.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has bee...
CVE-2024-10605
CVE-2024-10605 affects Code-Projects Blood Bank Management System 1.0. The vulnerability is a cross-site request forgery in an unspecified portion of the file /file/request.php. Attack is feasible remotely and exploitation is possible without user privileges, with user interaction required per CV...
CVE-2024-10557 code-projects Blood Bank Management System updateprofile.php cross-site request forgery
A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /file/updateprofile.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely...
Code-Projects Blood Bank Management System 跨站请求伪造漏洞
Code-Projects Blood Bank Management System is a Code-Projects open source blood bank management system. A cross-site request forgery vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which originates from a cross-site request forgery vulnerability contained in the fi...