7413 matches found
PT-2024-15586
Name of the Vulnerable Software and Affected Versions code-projects Human Resource Integrated System version 1.0 Description A critical issue was found in the system, affecting some unknown functionality of the file update personal info.php. The manipulation of the sex argument leads to SQL...
CVE-2024-0460: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/pages/student-print.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...
CVE-2024-0462: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /production/designeeviewstatus.php of the component HTTP POST Request Handler. The manipulation of the argument haydi...
CVE-2024-0469: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file updatepersonalinfo.php. The manipulation of the argument sex leads to sql injection. The attack may be launched remotely. Th...
CVE-2024-0463: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /production/adminviewinfo.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to sql...
PT-2024-15580
Name of the Vulnerable Software and Affected Versions code-projects Online Faculty Clearance version 1.0 Description A critical issue affects some unknown functionality of the file /production/admin view info.php of the component HTTP POST Request Handler. The manipulation of the argument haydi...
PT-2024-15581 · Unknown · Code-Projects Online Faculty Clearance
Name of the Vulnerable Software and Affected Versions: code-projects Online Faculty Clearance version 1.0 Description: A critical vulnerability has been found in the code-projects Online Faculty Clearance. This issue affects the file delete faculty.php of the component HTTP GET Request Handler. T...
CVE-2024-0466: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file filetable.php. The manipulation of the argument perid leads to sql injection. The exploit has been disclosed to the...
CVE-2024-0474: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in code-projects Dormitory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit h...
PT-2024-15584
Name of the Vulnerable Software and Affected Versions code-projects Employee Profile Management System version 1.0 Description A problematic issue was found in the code-projects Employee Profile Management System. The manipulation of the pos name argument in the file edit position query.php leads...
PT-2024-15578 · Code Projects · Code-Projects Online Faculty Clearance
Name of the Vulnerable Software and Affected Versions: code-projects Online Faculty Clearance version 1.0 Description: A critical issue has been found in the HTTP POST Request Handler component of the file deactivate.php. The manipulation of the haydi argument leads to SQL injection. This issue c...
PT-2024-15587 · Unknown · Code-Projects Human Resource Integrated System
Name of the Vulnerable Software and Affected Versions: code-projects Human Resource Integrated System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /admin route/inc service credits.php. The manipulation of the id argument leads to SQ...
CVE-2024-0470: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been classified as critical. This affects an unknown part of the file /adminroute/incservicecredits.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...
PT-2024-15590
Name of the Vulnerable Software and Affected Versions code-projects Dormitory Management System version 1.0 Description A critical vulnerability has been found in the code-projects Dormitory Management System. The issue is related to an unknown function of the file comment.php, where the...
CVE-2024-0359
The CVE-2024-0359 entry concerns a SQL injection in code-projects Simple Online Hotel Reservation System 1.0, affecting login.php. The vulnerability arises from unsafely handling the username and password arguments, allowing remote attackers to manipulate SQL queries and potentially compromise co...
CVE-2024-0359 code-projects Simple Online Hotel Reservation System login.php sql injection
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely...
PT-2024-15494 · Unknown · Code-Projects Simple Online Hotel Reservation System
Name of the Vulnerable Software and Affected Versions: code-projects Simple Online Hotel Reservation System version 1.0 Description: A critical issue has been found in the code-projects Simple Online Hotel Reservation System. The manipulation of the username and password arguments in the file...
RDoc: Command Injection
Background RDoc produces HTML and command-line documentation for Ruby projects. Description A vulnerability has been discovered in RDoc. Please review the CVE identifier referenced below for details. Impact RDoc used to call Kernelopen to open a local file. If a Ruby project has a file whose name...
GitLab 13.8 < 13.8.7 / 13.9 < 13.9.5 / 13.10 < 13.10.1 (CVE-2021-22198)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user to delete incident metric images of public projects. CVE-2021-22198 Note that...
GitLab 0.0 < 14.3.6 / 14.4 < 14.4.4 / 14.5 < 14.5.2 (CVE-2021-39937)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A collision in access memoization logic in all versions of GitLab CE/EE before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, leads to potential...