CVE-2023-37069: Improper Neutralization of Special Elements used in an SQL Command

Code-Projects Online Hospital Management System V1.0 is vulnerable to SQL Injection SQLI attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the login id and password fields during the login...

CVE-2023-37069

Code-Projects Online Hospital Management System V1.0 is vulnerable to SQL Injection due to failure to validate input in the login id and password fields, allowing attackers to inject SQL into queries. The vulnerability is tied to the login process and could enable manipulation of backend queries....

CVE-2023-37069

Code-Projects Online Hospital Management System V1.0 is vulnerable to SQL Injection SQLI attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the login id and password fields during the login...

CVE-2023-37068

Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username and password field...

Sql injection

Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username and password field...

CVE-2023-37068

Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username and password field...

CVE-2023-37068: Improper Neutralization of Special Elements used in an SQL Command

Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username and password field...

PT-2023-25781 · Code Projects · Code-Projects Gym Management System

Name of the Vulnerable Software and Affected Versions: Code-Projects Gym Management System version V1.0 Description: The issue allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation. This arises due to...

CVE-2023-37068

Code-Projects Gym Management System v1.0 is affected by a SQL injection in the login form caused by insufficient validation of username and password input. This vulnerability enables remote attackers to run arbitrary SQL commands, leading to unauthorized access and potential data manipulation. Ex...

Dexx CMS HTML And Site Builder 2.2.3 XSS / Arbitrary File Upload

==================================================================================================================================== | Title : Dexx CMS - HTML and Site Builder V2.2.3 Remote File Upload vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser :...

Improper Authorization

gitlab is vulnerable to Improper Authorization. The vulnerabiltiy allows an attacker to extract the value of an unprotected variable they know the name of in public projects or private projects they're a member of...

Information Disclosure

gitlab is vulnerable to Information Disclosure. The vulnerability exists because the non-project members can see the default branch name for projects...

Improper Authorization

gitlab is vulnerable to Improper Authorization. The vulnerability allows an attackers in private projects to view CI/CD analytics...

Improper Authorization

gitlab is vulnerable to Improper Authorization. This vulnerability allows an authenticated user to delete incident metric images of public projects due to improper authorization mechanisms...

Improper Authorization

gitlab is vulnerable to Improper Authorization. This allows a malicious user in a private project to view tag data on release pages due to improper authorization checks within gitlab...

CVE-2023-4002

Removed by vendor...

PT-2023-27214 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 14.1 through 16.0.7 GitLab EE versions 16.1 through 16.1.2 GitLab EE versions 16.2 through 16.2.1 Description: An issue has been discovered in GitLab EE where EE-licensed users could link any security policy project by its ...

Artemis - APK Infrastructure Investigator

Overview A tools for Find APK Infrastructure . HADESS performs offensive cybersecurity services through infrastructures and software that include vulnerability analysis, scenario attack planning, and implementation of custom integrated preventive projects. We organized our activities around the...

GHSA-M4HC-M2V6-HFW8 Improper authorization on debug and artifact file downloads

Impact An authenticated user can download a debug or artifact bundle from arbitrary organizations and projects with a known bundle ID. The user does not need to be a member of the organization or have permissions on the project. Patches A patch was issued to ensure authorization checks are proper...

PT-2023-25557

Name of the Vulnerable Software and Affected Versions openstack-neutron affected versions not specified Description An uncontrolled resource consumption flaw was found in openstack-neutron, allowing a remote authenticated user to query a list of security groups for an invalid project. This issue...