CVE-2024-11076: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /activation.php. The manipulation of the argument ehash leads to sql injection. The attack may be initiated remotely. The exploit has been...

PT-2024-16762

Name of the Vulnerable Software and Affected Versions 1000 Projects Beauty Parlour Management System version 1.0 Description A critical vulnerability was found in the 1000 Projects Beauty Parlour Management System. The issue affects an unknown functionality of the file /index.php. The manipulatio...

CVE-2024-11055

CVE-2024-11055 affects 1000 Projects Beauty Parlour Management System 1.0. The vulnerability resides in admin-profile.php where manipulating the adminname parameter triggers a SQL injection. Attacks may be remote and the exploit has been disclosed publicly. Connected documents confirm the issue a...

PT-2024-16728

Name of the Vulnerable Software and Affected Versions 1000 Projects Beauty Parlour Management System version 1.0 Description A critical issue has been found in the 1000 Projects Beauty Parlour Management System. This issue affects some unknown processing of the file /admin/admin-profile.php. The...

CVE-2024-11055: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in 1000 Projects Beauty Parlour Management System 1.0. This issue affects some unknown processing of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to sql injection. The attack may be initiated...

CVE-2024-10998

CVE-2024-10998 affects 1000 Projects Bookstore Management System 1.0. A vulnerability in the admin file /admin/process_category_add.php allows manipulation of the cat parameter, causing SQL injection. The issue can be triggered remotely and has been disclosed publicly. Mitigation options document...

CVE-2024-10996

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/processcategoryedit.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-10997

CVE-2024-10997 affects 1000 Projects Bookstore Management System 1.0. The issue is an SQL injection in the file /book_list.php via manipulation of the id parameter. A remote attacker can exploit this, and public disclosure of the exploit is noted. Documented impact is high for confidentiality, in...

CVE-2024-10996

CVE-2024-10996 affects 1000 Projects Bookstore Management System v1.0. The vulnerability is an SQL injection in /admin/process_category_edit.php, triggered by manipulating the cat parameter. The issue is exploitable remotely and reportedly has had a public exploit disclosure. Multiple connected s...

CVE-2024-10989

A vulnerability classified as critical has been found in code-projects E-Health Care System 1.0. This affects an unknown part of the file /Admin/detail.php. The manipulation of the argument sid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2024-10989 code-projects E-Health Care System detail.php sql injection

A vulnerability classified as critical has been found in code-projects E-Health Care System 1.0. This affects an unknown part of the file /Admin/detail.php. The manipulation of the argument sid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2024-10988 code-projects E-Health Care System doctor_login.php sql injection

A vulnerability was found in code-projects E-Health Care System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Doctor/doctorlogin.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...

CVE-2024-10988 code-projects E-Health Care System doctor_login.php sql injection

A vulnerability was found in code-projects E-Health Care System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Doctor/doctorlogin.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...

CVE-2024-10987 code-projects E-Health Care System user_appointment.php sql injection

A vulnerability was found in code-projects E-Health Care System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Doctor/userappointment.php. The manipulation of the argument scheduleid/scheduledate/scheduleday/starttime/endtime/booking...

CVE-2024-10987 code-projects E-Health Care System user_appointment.php sql injection

A vulnerability was found in code-projects E-Health Care System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Doctor/userappointment.php. The manipulation of the argument scheduleid/scheduledate/scheduleday/starttime/endtime/booking...

code-projects E-Health Care System 注入漏洞

Code-Projects E-Health Care System is an e-health care system from Code-Projects open source. An injection vulnerability exists in code-projects E-Health Care System version 1.0, which stems from the parameter sid in the file /Admin/detail.php that can lead to SQL injection...

PT-2024-16689

Name of the Vulnerable Software and Affected Versions 1000 Projects Bookstore Management System version 1.0 Description A critical issue has been found in the 1000 Projects Bookstore Management System. The problem affects the file /book list.php and is related to the manipulation of the id...

Code-Projects E-Health Care System 注入漏洞

Code-Projects E-Health Care System is an e-health care system from Code-Projects open source. An injection vulnerability exists in Code-Projects E-Health Care System version 1.0, which originates in the file /Doctor/userappointment.php with parameters scheduleid/scheduledate/scheduleday/starttime...

Code-Projects E-Health Care System 注入漏洞

Code-Projects E-Health Care System is a Code-Projects open source e-health care system. An injection vulnerability exists in Code-Projects E-Health Care System version 1.0, which stems from the parameter email in the file /Doctor/doctorlogin.php can lead to SQL injection...

CVE-2024-10988: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects E-Health Care System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Doctor/doctorlogin.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...