PT-2024-19826 · Meta · Meta Spark Studio

Name of the Vulnerable Software and Affected Versions: Meta Spark Studio versions prior to v176 Description: When opening a new project, Meta Spark Studio would execute scripts defined inside of a package.json file included as part of that project. Those scripts would have the ability to execute...

CVE-2024-0504 code-projects Simple Online Hotel Reservation System Make a Reservation Page add_reserve.php cross site scripting

A vulnerability has been found in code-projects Simple Online Hotel Reservation System 1.0 and classified as problematic. This vulnerability affects unknown code of the file addreserve.php of the component Make a Reservation Page. The manipulation of the argument Firstname/Lastname with the input...

CVE-2024-0503 code-projects Online FIR System registercomplaint.php cross site scripting

A vulnerability was found in code-projects Online FIR System 1.0. It has been classified as problematic. This affects an unknown part of the file registercomplaint.php. The manipulation of the argument Name/Address leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2024-0489

A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/action/editchicken.php. The manipulation of the argument ref leads to sql injection. The attack can be initiated remotely...

Sql injection

A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/action/editchicken.php. The manipulation of the argument ref leads to sql injection. The attack can be initiated remotely...

CVE-2024-0489 code-projects Fighting Cock Information System edit_chicken.php sql injection

A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/action/editchicken.php. The manipulation of the argument ref leads to sql injection. The attack can be initiated remotely...

CVE-2024-0488 code-projects Fighting Cock Information System new-feed.php sql injection

A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/action/new-feed.php. The manipulation of the argument typefeed leads to sql injection. It is possible to initiate the attack remotel...

CVE-2024-0487 code-projects Fighting Cock Information System delete-vaccine.php sql injection

A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/action/delete-vaccine.php. The manipulation of the argument ref leads to sql injection. The attack may be launched...

CVE-2024-0487 code-projects Fighting Cock Information System delete-vaccine.php sql injection

A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/action/delete-vaccine.php. The manipulation of the argument ref leads to sql injection. The attack may be launched...

CVE-2024-0487

CVE-2024-0487 affects code-projects Fighting Cock Information System 1.0. The vulnerability is a SQL injection in the file /admin/action/delete-vaccine.php caused by manipulation of the ref argument. It can be exploited remotely and has been publicly disclosed. Impact is described as high for con...

CVE-2024-0486

A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/action/addcon.php. The manipulation of the argument chicken leads to sql injection. The attack can be...

CVE-2024-0486 code-projects Fighting Cock Information System add_con.php sql injection

A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/action/addcon.php. The manipulation of the argument chicken leads to sql injection. The attack can be...

Sql injection

A vulnerability, which was classified as critical, was found in code-projects Fighting Cock Information System 1.0. Affected is an unknown function of the file admin/pages/tables/addcon.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...

CVE-2024-0485 code-projects Fighting Cock Information System add_con.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Fighting Cock Information System 1.0. Affected is an unknown function of the file admin/pages/tables/addcon.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...

CVE-2024-0484 code-projects Fighting Cock Information System update_mother.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Fighting Cock Information System 1.0. This issue affects some unknown processing of the file admin/action/updatemother.php. The manipulation of the argument agemother leads to sql injection. The attack may be...

CVE-2024-0478

CVE-2024-0478 affects code-projects Fighting Cock Information System 1.0. The vulnerability is a SQL injection in the /admin/pages/edit_chicken.php file, triggered by manipulating the id argument. Exploitation is network-based and reportedly possible remotely, with the exploit publicly disclosed ...

projects-manager (>=0.8.3.3 <=0.8.3.4) potentially affected by CVE-2023-52289 via flaskcode (=0.0.8)

flaskcode PYPI version =0.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on flaskcode and may be impacted: - projects-manager =0.8.3.3, =0.8.3.4 Source cves: CVE-2023-52289 Source advisory: OSV:GHSA-V3RG-QM46-XRG9...

projects-manager (>=0.8.3.3 <=0.8.3.4) potentially affected by CVE-2023-52288 via flaskcode (=0.0.8)

flaskcode PYPI version =0.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on flaskcode and may be impacted: - projects-manager =0.8.3.3, =0.8.3.4 Source cves: CVE-2023-52288 Source advisory: OSV:GHSA-6H4Q-63C5-QFQF...

Sql injection

A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/action/update-deworm.php. The manipulation of the argument usagedeworm leads to sql injection. The attack can be initiated...

CVE-2024-0477 code-projects Fighting Cock Information System update-deworm.php sql injection

A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/action/update-deworm.php. The manipulation of the argument usagedeworm leads to sql injection. The attack can be initiated...