GitLab 13.8 < 13.8.7 / 13.9 < 13.9.5 / 13.10 < 13.10.1 (CVE-2021-22198)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user to delete incident metric images of public projects. CVE-2021-22198 Note that...

Sql injection

A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and ma...

CVE-2023-7130 code-projects College Notes Gallery login.php sql injection

A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and ma...

CVE-2023-7130: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and ma...

PYSEC-2023-271

Hail is an open-source, general-purpose, Python-based data analysis tool with additional data types and methods for working with genomic data. Hail relies on OpenID Connect OIDC email addresses from ID tokens to verify the validity of a user's domain, but because users have the ability to change...

CVE-2023-7149

CVE-2023-7149 affects code-projects QR Code Generator 1.0. The vulnerability is a cross-site scripting (XSS) flaw in the /download.php?file=author.png parameter, exploitable via input such as "&gt;; this can be triggered remotely and requires user interaction. Several sources corroborate the issu...

CVE-2023-7143

Code-projects Client Details System 1.0 has a cross-site scripting vulnerability in /admin/regester.php. The issue arises from manipulation of fname, lname, email, or contact, enabling likely remote exploitation. Connected sources (NVD/NVD-derived entries and PT-Security) confirm the vulnerabilit...

CVE-2023-7143 code-projects Client Details System regester.php cross site scripting

A vulnerability was found in code-projects Client Details System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/regester.php. The manipulation of the argument fname/lname/email/contact leads to cross site scripting. The attack may be...

CVE-2023-7141

A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/update-clients.php. The manipulation of the argument uid leads to sql injection. The exploit has been disclosed to the public and may be...

CVE-2023-7142

A vulnerability was found in code-projects Client Details System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/clientview.php. The manipulation of the argument ID leads to sql injection. The exploit has been disclosed to th...

CVE-2023-7141

A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/update-clients.php. The manipulation of the argument uid leads to sql injection. The exploit has been disclosed to the public and may be...

Sql injection

A vulnerability was found in code-projects Client Details System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/clientview.php. The manipulation of the argument ID leads to sql injection. The exploit has been disclosed to th...

CVE-2023-7142

Summary (CVE-2023-7142): Code-Projects Client Details System 1.0 contains a SQL injection in /admin/clientview.php via the ID parameter. The vulnerability arises from manipulation of the ID argument, with public disclosure of the exploit. NVD lists CVSS-3.1 scores ranging from 9.8 (CRITICAL) to o...

CVE-2023-7142 code-projects Client Details System clientview.php sql injection

A vulnerability was found in code-projects Client Details System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/clientview.php. The manipulation of the argument ID leads to sql injection. The exploit has been disclosed to th...

CVE-2023-7149: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects QR Code Generator 1.0. It has been classified as problematic. This affects an unknown part of the file /download.php?file=author.png. The manipulation of the argument file with the input " leads to cross site scripting. It is possible to initiate the...

CVE-2023-7142: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Client Details System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/clientview.php. The manipulation of the argument ID leads to sql injection. The exploit has been disclosed to th...

CVE-2023-7143: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Client Details System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/regester.php. The manipulation of the argument fname/lname/email/contact leads to cross site scripting. The attack may be...

CVE-2023-7141 code-projects Client Details System update-clients.php sql injection

A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/update-clients.php. The manipulation of the argument uid leads to sql injection. The exploit has been disclosed to the public and may be...

CVE-2023-7139

A vulnerability has been found in code-projects Client Details System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/regester.php of the component HTTP POST Request Handler. The manipulation of the argument fname/lname/email/contact leads to sql...

CVE-2023-7140

CVE-2023-7140 affects code-projects Client Details System 1.0. The vulnerability arises from manipulating the id parameter in /admin/manage-users.php, leading to a SQL injection. Multiple connected sources corroborate an in-the-wild exploit and public disclosure. The exact impacted versions and a...