611 matches found
CVE-2024-2059
CVE-2024-2059 pertains to SourceCodester Petrol Pump Management Software 1.0, where an unrestricted file upload is possible via /admin/app/service_crud.php when handling the photo parameter. The root cause is manipulation of the photo argument that enables remote, unauthenticated uploads (as desc...
CVE-2024-2059 SourceCodester Petrol Pump Management Software service_crud.php unrestricted upload
A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/app/servicecrud.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be...
CVE-2024-2059 SourceCodester Petrol Pump Management Software service_crud.php unrestricted upload
A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/app/servicecrud.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be...
CVE-2024-2058
A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/product.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be...
CVE-2024-2058
A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/product.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be...
Out-of-bounds
A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/product.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be...
CVE-2024-2058
CVE-2024-2058 affects SourceCodester Petrol Pump Management Software 1.0. The vulnerability is in the /admin/app/product.php file, where manipulating the photo parameter enables unrestricted file upload. The issue is exploitable remotely, and multiple sources indicate the exploit has been disclos...
CVE-2024-2058 SourceCodester Petrol Pump Management Software product.php unrestricted upload
A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/product.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be...
CVE-2024-2058 SourceCodester Petrol Pump Management Software product.php unrestricted upload
A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/product.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be...
Petrol Pump Management Software SQL Injection Vulnerability
Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A SQL injection vulnerability exists in Petrol Pump Management Software version 1.0, which stems from an SQL injection issue in the /admin/editcategories.php file...
CVE-2024-27744
Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the image parameter in the profile.php component...
Petrol Pump Management Software Cross-Site Scripting Vulnerability
Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A cross-site scripting vulnerability exists in Petrol Pump Management Software version v.1.0, which originates from a vulnerability that allows an attacker to execute arbitrary code via the...
CVE-2024-27746
SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the index.php component...
CVE-2024-27743
Petrol Pump Management Software v1.0 is affected by a stored Cross-Site Scripting vulnerability in the add_invoices.php component, triggered via the Address field. The underlying issue is unsanitized user input leading to script execution when the stored value is rendered (e.g., in the manage_inv...
Petrol Pump Management Software Cross-Site Scripting Vulnerability
Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A cross-site scripting vulnerability exists in Petrol Pump Management Software version 1.0, which stems from a cross-site scripting issue in the /admin/app/profilecrud.php file...
PT-2024-18688 · Sourcecodester · Sourcecodester Petrol Pump Management
Name of the Vulnerable Software and Affected Versions: SourceCodester Petrol Pump Management Software version 1.0 Description: A problematic issue was found in the software, affecting an unknown function of the file /admin/app/profile crud.php. The manipulation of the username argument leads to...
Petrol Pump Management Software SQL Injection Vulnerability
Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A SQL injection vulnerability exists in Petrol Pump Management Software version 1.0, which originates from a SQL injection issue in the /admin/app/logincrud.php file...
Petrol Pump Management Software Cross-Site Scripting Vulnerability
Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A cross-site scripting vulnerability exists in Petrol Pump Management Software version v.1.0, which originates from a vulnerability that allows an attacker to execute arbitrary code with a...
CVE-2024-27743
Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the Address parameter in the addinvoices.php component...