PT-2025-5855

Name of the Vulnerable Software and Affected Versions Code-projects Shopping Portal version 1.0 Description The issue concerns an arbitrary file upload vulnerability in the insert-product.php page. This means that an attacker could potentially upload malicious files to the server, which could lea...

CVE-2024-57668: Unrestricted Upload of File with Dangerous Type

In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload vulnerability...

CVE-2024-57668

CVE-2024-57668 concerns Code-projects Shopping Portal v1.0 where insert-product.php contains an arbitrary file upload vulnerability. Multiple connected sources confirm the flaw, tying it to the insert-product.php upload handling, with potential impacts on confidentiality, integrity, and availabil...

Code-Projects Shopping Portal 安全漏洞

Code-Projects Shopping Portal is a Code-Projects open source shopping website. A security vulnerability exists in Code-Projects Shopping Portal v1.0, which originates from an arbitrary file upload vulnerability in the insert-product.php page...

CVE-2022-31094

ScratchTools is a web extension designed to make interacting with the Scratch programming language community Scratching easier. In affected versions anybody who uses the Recently Viewed Projects feature is vulnerable to having their account taken over if they view a project that tries to. The iss...

CVE-2020-13270

Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to create a fork relation on restricted public projects via API...

UBUNTU-CVE-2024-3976

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible to disclose via the UI the confidential issues title and description from a public project to...

CVE-2024-12965

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /updateexdetail.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit h...

CVE-2024-12961

A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /updateachdetails.php. The manipulation of the argument q leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2024-12958

A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown part of the file /updateprodetails.php. The manipulation of the argument q leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

CVE-2024-12942

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/adminlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack...

CVE-2024-12959

A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /updatepersonaldetails.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2024-1829

A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file Source/librarian/user/student/registration.php. The manipulation of the argument email/regno/phone/username leads to sql injectio...

CVE-2024-1830

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched...

CVE-2024-10844

A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file search.php. The manipulation of the argument s leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-10996

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/processcategoryedit.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-10968

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /contactprocess.php. The manipulation of the argument fnm leads to sql injection. The attack can be launched remotel...

CVE-2024-11819

A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /forgotpasswordprocess.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploi...

PT-2025-5692 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 14.0 through 16.9.7 GitLab CE/EE versions 16.10 through 16.10.5 GitLab CE/EE versions 16.11 through 16.11.2 Description: An issue has been discovered in GitLab CE/EE that affects the confidentiality of issues in public...

CVE-2024-48964

The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted Gradle project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning...