CVE-2024-9035: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/login.php of the component Admin Login. The manipulation of the argument username/password leads to sql injection. It is possible to...

CVE-2024-9009: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Online Quiz Site 1.0. This issue affects some unknown processing of the file showtest.php. The manipulation of the argument subid leads to sql injection. The attack may be initiated remotely. The exploit has been...

Code-Projects Crud Operation System SQL注入漏洞

Code-Projects Crud Operation System is a Code-Projects open source application. A SQL injection vulnerability exists in Code-Projects Crud Operation System version 1.0, which originates from a SQL injection vulnerability contained in the sid parameter of the updata.php file...

CVE-2024-9011: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Crud Operation System 1.0. Affected is an unknown function of the file updata.php. The manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

Code-Projects Patient Record Management System SQL注入漏洞

Code-Projects Patient Record Management System is a Code-Projects open source patient record management system. A SQL injection vulnerability exists in Code-Projects Patient Record Management System version 1.0, which originates from the username parameter in the login.php file containing a SQL...

CVE-2024-9009 code-projects Online Quiz Site showtest.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Online Quiz Site 1.0. This issue affects some unknown processing of the file showtest.php. The manipulation of the argument subid leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-9009 code-projects Online Quiz Site showtest.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Online Quiz Site 1.0. This issue affects some unknown processing of the file showtest.php. The manipulation of the argument subid leads to sql injection. The attack may be initiated remotely. The exploit has been...

Code-Projects Online Quiz Site SQL注入漏洞

Code-Projects Online Quiz Site is a Code-Projects open source online quiz site. A SQL injection vulnerability exists in Code-Projects Online Quiz Site version 1.0, which stems from the parameter subid in the file showtest.php that causes SQL injection...

PT-2024-39365 · Unknown · Code-Projects Crud Operation System

Name of the Vulnerable Software and Affected Versions: code-projects Crud Operation System version 1.0 Description: A critical issue was found in the code-projects Crud Operation System. The problem lies in an unknown function of the file updata.php, where the manipulation of the sid argument lea...

CVE-2024-8944

CVE-2024-8944 affects code-projects Hospital Management System 1.0. The vulnerability is a SQL injection in the file check_availability.php caused by improper validation of the email parameter; exploitation is possible remotely over the network. Multiple connected sources corroborate this, with c...

Sentry improperly authorizes muting of alert rules

Impact An authenticated user can mute alert rules from arbitrary organizations and projects given a known given rule ID. The user does not need to be a member of the organization or have permissions on the project. In our review, we have identified no instances where alerts have been muted by...

CVE-2024-8944: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Hospital Management System 1.0. This affects an unknown part of the file checkavailability.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2024-8868

CVE-2024-8868 affects code-projects Crud Operation System 1.0. The vulnerability is a SQL injection in the savedata.php processing path, triggered by manipulating the sname parameter. Impact is described as critical, with remote attack capability and publicly disclosed exploit. Affected component...

Code-Projects Crud Operation System SQL注入漏洞

Code-Projects Crud Operation System is a Code-Projects open source application. Code-Projects Crud Operation System version 1.0 suffers from a SQL injection vulnerability that results from manipulation of the parameter sname...

CVE-2024-8868: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Crud Operation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file savedata.php. The manipulation of the argument sname leads to sql injection. The attack may be initiated remotely. The exploit has been...

PT-2024-39286 · Unknown · Code-Projects Crud Operation System

Name of the Vulnerable Software and Affected Versions: code-projects Crud Operation System version 1.0 Description: A critical issue affects some unknown processing of the file savedata.php. The manipulation of the argument sname leads to sql injection. The attack may be initiated remotely. The...

CVE-2024-6862

A Cross-Site Request Forgery CSRF vulnerability exists in lunary-ai/lunary version 1.2.34 due to overly permissive CORS settings. This vulnerability allows an attacker to sign up for and create projects or use the instance as if they were a user with local access. The main attack vector is for...

CVE-2024-8762

A vulnerability was found in code-projects Crud Operation System 1.0. It has been classified as critical. This affects an unknown part of the file /updatedata.php. The manipulation of the argument sid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-8762 code-projects Crud Operation System updatedata.php sql injection

A vulnerability was found in code-projects Crud Operation System 1.0. It has been classified as critical. This affects an unknown part of the file /updatedata.php. The manipulation of the argument sid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-8762 code-projects Crud Operation System updatedata.php sql injection

A vulnerability was found in code-projects Crud Operation System 1.0. It has been classified as critical. This affects an unknown part of the file /updatedata.php. The manipulation of the argument sid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...