5737 matches found
Code-Projects Pharmacy Management System SQL注入漏洞
Code-Projects Pharmacy Management System is a Code-Projects open source pharmacy management system. A SQL injection vulnerability exists in Code-Projects Pharmacy Management System version 1.0, which originates from the name parameter of the /addnewpurchase.php?action=issupplier page contains a S...
PT-2024-16084 · Code Projects · Hospital Management System
Name of the Vulnerable Software and Affected Versions: code-projects Hospital Management System version 1.0 Description: A critical issue has been found in the Hospital Management System, affecting the processing of the file get doctor.php. The manipulation of the specilizationid argument leads t...
23andMe will retain your genetic information, even if you delete the account
Deleting your personal data from 23andMe is proving to be hard. There are good reasons for people wanting to delete their data from 23andMe: The DNA testing platform has a lot of problems, so let’s start with a recap. A little over a year ago, cybercriminals put up information belonging to as man...
CVE-2024-22034 Crafted projects can overwrite special files in the .osc config directory
Attackers could put the special files in .osc into the actual package sources e.g. apiurl. This allows the attacker to change the configuration of osc for the victim...
CVE-2024-22034 Crafted projects can overwrite special files in the .osc config directory
Attackers could put the special files in .osc into the actual package sources e.g. apiurl. This allows the attacker to change the configuration of osc for the victim...
CVE-2024-10024 code-projects Pharmacy Management System manage_medicine_stock.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Pharmacy Management System 1.0. This issue affects some unknown processing of the file /php/managemedicinestock.php. The manipulation of the argument name/packing/genericname/suppliersname leads to sql injection. T...
CVE-2024-10022 code-projects Pharmacy Management System manage_supplier.php sql injection
A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/managesupplier.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-10022 code-projects Pharmacy Management System manage_supplier.php sql injection
A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/managesupplier.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-10021 code-projects Pharmacy Management System manage_purchase.php sql injection
A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /php/managepurchase.php?action=search&tag=VOUCHERNUMBER. The manipulation of the argument text leads to sql injection. The...
CVE-2024-9986 code-projects Blood Bank Management System member_register.php sql injection
A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file memberregister.php. The manipulation of the argument fullname/username/password/email leads to sql injection. The attack may be...
CVE-2024-9976
A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/managecustomer.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-9976 code-projects Pharmacy Management System manage_customer.php sql injection
A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/managecustomer.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2024-9976
CVE-2024-9976 affects code-projects Pharmacy Management System 1.0. The vulnerability is a SQL injection in the file /php/manage_customer.php?action=search (and related /php/manage_customer.php endpoints) caused by unsanitized input in the text parameter, exploitable remotely and publicly disclos...
ca.ibodrov.concord:repository-browser-plugin (>=1.0.0 <=1.0.1), ca.ibodrov.concord:testcontainers-concord-core (>=2.0.3 <=2.0.5) +19 more potentially affected by CVE-2024-9823 via org.eclipse.jetty.ee8:jetty-ee8-servlets (>=12.0.0 <=12.0.29)
org.eclipse.jetty.ee8:jetty-ee8-servlets MAVEN version =12.0.0, =1.0.0, =2.0.3, =0.0.27, =0.0.27, =2.0.20, =2.22.0, =2.22.0, =2.22.0, =2.22.0, =2.22.0, =2.22.0, =2.22.0, =2.22.0, =2.22.0, =2.22.0, =2.38.0 and more Source cves: CVE-2024-9823 Source advisory: OSV:GHSA-J26W-F9RQ-MR2Q...
Code-Projects Blood Bank System SQL注入漏洞
Code-Projects Blood Bank System is a Code-Projects open source blood bank management system. A SQL injection vulnerability exists in Code-Projects Blood Bank System version 1.0, which originates from a SQL injection vulnerability in the useremail parameter of the reset.php file...
CVE-2024-9817 code-projects Blood Bank System update.php sql injection
A vulnerability was found in code-projects Blood Bank System 1.0. It has been classified as critical. This affects an unknown part of the file /update.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...
CVE-2024-9812
A vulnerability classified as critical was found in code-projects Crud Operation System 1.0. This vulnerability affects unknown code of the file delete.php. The manipulation of the argument sid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...
CVE-2024-9812 code-projects Crud Operation System delete.php sql injection
A vulnerability classified as critical was found in code-projects Crud Operation System 1.0. This vulnerability affects unknown code of the file delete.php. The manipulation of the argument sid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...
CVE-2024-9812
Summary (CVE-2024-9812) A SQL injection flaw exists in code-projects Crud Operation System 1.0, affecting the delete.php file via manipulation of the “sid” parameter. The issue is exploitable remotely and can impact confidentiality, integrity, and availability as described in multiple sources. Th...
CVE-2024-9811 code-projects Restaurant Reservation System filter3.php sql injection
A vulnerability classified as critical has been found in code-projects Restaurant Reservation System 1.0. This affects an unknown part of the file filter3.php. The manipulation of the argument company leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...