SourceCodester Petrol Pump Management Software Security Vulnerability

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A security vulnerability exists in SourceCodester Petrol Pump Management Software version 1.0, which stems from an unrestricted upload issue in the /admin/app/servicecrud.php file...

CVE-2024-27744

CVE-2024-27744 is a stored Cross-Site Scripting vulnerability in Petrol Pump Management Software v1.0. The issue arises from user-supplied input to the image parameter in profile.php, enabling an attacker to execute arbitrary code when the crafted payload is processed (e.g., SVG uploads). Public ...

CVE-2024-27746

Petrol Pump Management Software v1.0 is affected by a SQL injection vulnerability that allows an attacker to execute arbitrary code via the email address parameter in index.php. The issue is documented across multiple sources (including CVE-2024-27746 records and Red Hat/CNNVD entries), with high...

Petrol Pump Management Software SQL Injection Vulnerability

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. Petrol Pump Management Software version v.1.0 suffers from a SQL injection vulnerability that originates from allowing an attacker to execute arbitrary code via the address parameter in the...

CVE-2024-27747

Petrol Pump Management Software v1.0 (vendor mayuri_k) contains a file-upload vulnerability in profile.php via the Image parameter in the email field, enabling remote code execution. Root cause: insufficient validation of uploaded content allows uploading a PHP shell (as shown by PoCs) which can ...

Petrol Pump Management Software Code Issue Vulnerability

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A code issue vulnerability exists in Petrol Pump Management Software version 1.0, which stems from an unrestricted upload issue in the /admin/app/product.php file...

CVE-2024-27747

File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component...

PT-2024-18687 · Sourcecodester · Sourcecodester Petrol Pump Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Petrol Pump Management Software version 1.0 Description: A critical issue has been found in the software, affecting the processing of the file /admin/edit categories.php. The manipulation of the id argument leads to sql...

PT-2024-18686 · Sourcecodester · Sourcecodester Petrol Pump Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Petrol Pump Management Software version 1.0 Description: A critical issue was found in the software, affecting the /admin/edit supplier.php file. The manipulation of the id argument leads to SQL injection. The attack can be...

PT-2024-18683 · Sourcecodester · Sourcecodester Petrol Pump Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Petrol Pump Management Software version 1.0 Description: A critical issue was found in the software, affecting an unknown functionality of the file /admin/app/product.php. The manipulation of the photo argument leads to...

CVE-2024-27744

Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the image parameter in the profile.php component...

Petrol Pump Management Software Permission License and Access Control Issues Vulnerability

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. Petrol Pump Management Software version v.1.0 suffers from a privilege permission and access control issue vulnerability that originates from allowing an attacker to execute arbitrary code via...

CVE-2024-27746

SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the index.php component...

Petrol Pump Management Software SQL Injection Vulnerability

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A SQL injection vulnerability exists in Petrol Pump Management Software version 1.0, which stems from an SQL injection issue in the /admin/editsupplier.php file...

Petrol Pump Management Software 1.0 Shell Upload Vulnerability

Exploit Title: Petrol pump management software - File Upload Remote Code Execution RCE unauthenticated Application: Petrol pump management software Date: 20.02.2024 Bugs: File Upload Remote Code Execution RCE unauthenticated Exploit Author: SoSPiro Vendor Homepage: https://www.sourcecodester.com/...

The vulnerability of microprogrammed software in Osprey Pump Controller controllers, related to the disclosure of information through a query line, allows an intruder to disclose protected information.

The vulnerability of microprogrammed software in Osprey Pump Controller controllers relates to the disclosure of information through query strings. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the microprogramming software of Osprey Pump Controller allows a intruder to execute arbitrary commands.

The vulnerability of Microprogrammed Software in Osprey Pump Controller controllers relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially crafted HTTP requests...

Petrol Pump Management Software 1.0 Shell Upload

Exploit Title: Petrol pump management software - File Upload Remote Code Execution RCE unauthenticated Google Dork: N/A Application: Petrol pump management software Date: 20.02.2024 Bugs: File Upload Remote Code Execution RCE unauthenticated Exploit Author: SoSPiro Vendor Homepage:...

Dutch Man Deployed Stuxnet via Water Pump to Disable Iran’s Nukes

By Deeba Ahmed Beyond Bush and Obama: Dutch Investigation Uncovers Hidden Secrets of Stuxnet's Billion-Dollar Attack. This is a post from HackRead.com Read the original post: Dutch Man Deployed Stuxnet via Water Pump to Disable Irans Nukes...

pump-follow.com Improper Access Control vulnerability OBB-3808662

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...