CVE-2024-12935 code-projects Simple Admin Panel editItemForm.php sql injection

A vulnerability classified as critical was found in code-projects Simple Admin Panel 1.0. This vulnerability affects unknown code of the file editItemForm.php. The manipulation of the argument record leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2024-12935

The CVE-2024-12935 entry concerns code-projects Simple Admin Panel 1.0. The vulnerability is a SQL injection in the editItemForm.php file, affecting the argument record and allowing remote exploitation. Multiple sources (NVD, CVE records, and vendor feeds) confirm the flaw and its critical classi...

CVE-2024-12933

A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file updateItemController.php. The manipulation of the argument pname/pdesc leads to cross site scripting. The attack may be launched...

CVE-2024-12934 code-projects Simple Admin Panel updateItemController.php sql injection

A vulnerability classified as critical has been found in code-projects Simple Admin Panel 1.0. This affects an unknown part of the file updateItemController.php. The manipulation of the argument pdesk leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-12932

The CVE-2024-12932 affects Code-Projects Simple Admin Panel 1.0, specifically the addSizeController.php file. The vulnerability arises from manipulating the size parameter, which leads to cross-site scripting (XSS). The issue can be exploited remotely. Available connected documents confirm the co...

CVE-2024-12932 code-projects Simple Admin Panel addSizeController.php cross site scripting

A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file addSizeController.php. The manipulation of the argument size leads to cross site scripting. The attack can be launched...

CVE-2024-12931 code-projects Simple Admin Panel addCatController.php sql injection

A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been classified as critical. Affected is an unknown function of the file /addCatController.php. The manipulation of the argument size leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...

Code-Projects Job Recruitment 注入漏洞

Code-Projects Job Recruitment is a job portal of Code-Projects open source. Code-Projects Job Recruitment version 1.0 suffers from an injection vulnerability, which originates from the parameter cname/url in the cnupdate function of the file /parse/alledits.php that can lead to SQL injection...

Travel Management System 注入漏洞

Travel Management System is an open source travel management system from Code-Projects. An injection vulnerability exists in Travel Management System version 1.0, which stems from an incorrect manipulation of the parameter catid that can lead to sql injection...

CVE-2024-12938: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Simple Admin Panel 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file updateOrderStatus.php. The manipulation of the argument record leads to sql injection. The attack can be launched remotely. The...

CVE-2024-12935: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Simple Admin Panel 1.0. This vulnerability affects unknown code of the file editItemForm.php. The manipulation of the argument record leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2024-12954: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown part of the file /updateach.php. The manipulation of the argument achcerty leads to unrestricted upload. It is possible to initiate the attack remotely. The...

CVE-2024-12936: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Simple Admin Panel 1.0. This issue affects some unknown processing of the file catDeleteController.php. The manipulation of the argument record leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-12931: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been classified as critical. Affected is an unknown function of the file /addCatController.php. The manipulation of the argument size leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...

Code-Projects Job Recruitment 注入漏洞

Code-Projects Job Recruitment is an open source job portal from Code-Projects. An injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from the fact that incorrect manipulation of the degree parameter can lead to SQL injection...

Code-Projects Simple Admin Panel 注入漏洞

Code-Projects Simple Admin Panel is a simple admin panel from Code-Projects. An injection vulnerability exists in Code-Projects Simple Admin Panel version 1.0, which stems from the parameter cname that causes SQL injection...

CVE-2024-12962: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /parse/alledits.php. The manipulation of the argument skillset leads to sql injection. The attack can be launched remotely. The...

Travel Management System 安全漏洞

Travel Management System is an open source travel management system from Code-Projects. A security vulnerability exists in Travel Management System version 1.0, which stems from an incorrect manipulation of the parameter pid that can lead to sql injection...

CVE-2024-12928: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. This affects an unknown part. The manipulation of the argument cname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may b...

PT-2024-17834 · Code Projects · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A critical issue was found in the add xp function of the file / parse/ all edits.php. The manipulation of the job company argument leads to SQL injection. This issue can be exploited...