3835 matches found
CVE-2024-12486 code-projects Online Class and Exam Scheduling System rank_update.php sql injection
A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/rankupdate.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. T...
CVE-2024-12485 code-projects Online Class and Exam Scheduling System department.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...
kernel: net: avoid potential underflow in qdisc_pkt_len_init() with UFO
A flaw was found in the Linux kernel's network handling. A local user could craft a specific Generic Segmentation Offload GSO packet with UDP Fragmentation Offload UFO characteristics. This crafted packet could lead to an underflow in the qdiscpktleninit function, causing a kernel NULL pointer...
PT-2024-17622 · Unknown · Code-Projects Online Class/Exam Scheduling System
Name of the Vulnerable Software and Affected Versions: code-projects Online Class and Exam Scheduling System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /pages/term.php. The manipulation of the id argument leads to SQL injection. I...
PT-2024-17620
Name of the Vulnerable Software and Affected Versions code-projects Online Class and Exam Scheduling System version 1.0 Description A critical issue has been found in the system, affecting an unknown functionality of the file /pages/room update.php. The manipulation of the id argument leads to SQ...
PT-2024-17619 · Unknown · Code-Projects Online Class/Exam Scheduling System
Name of the Vulnerable Software and Affected Versions: code-projects Online Class and Exam Scheduling System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /pages/rank update.php. The manipulation of the id argument leads to SQL...
PT-2024-17618
Name of the Vulnerable Software and Affected Versions code-projects Online Class and Exam Scheduling System version 1.0 Description A critical issue has been found in the processing of the file /pages/department.php, where the manipulation of the id argument leads to SQL injection. The attack can...
PT-2024-17624 · Unknown · Code-Projects Online Class/Exam Scheduling System
Name of the Vulnerable Software and Affected Versions: code-projects Online Class and Exam Scheduling System version 1.0 Description: A critical issue has been found in the code-projects Online Class and Exam Scheduling System. This issue affects unknown code in the file /pages/teacher save.php...
CVE-2024-12360
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classupdate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...
CVE-2024-12360
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classupdate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...
CVE-2024-12360 code-projects Online Class and Exam Scheduling System class_update.php sql injection
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classupdate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...
CVE-2024-12360
Affected product: Code-Projects Online Class and Exam Scheduling System 1.0. The vulnerability is a SQL injection in the id parameter of class_update.php, caused by lack of validation/execution of unsafe SQL. Impact sequence: remote attacker could exploit; exploitation details publicly disclosed....
CVE-2024-12360 code-projects Online Class and Exam Scheduling System class_update.php sql injection
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classupdate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...
CVE-2024-12360: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classupdate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...
PT-2024-17569
Name of the Vulnerable Software and Affected Versions Online Class and Exam Scheduling System version 1.0 Description A critical issue has been found in the Online Class and Exam Scheduling System, affecting some unknown processing of the file class update.php. The manipulation of the id argument...
CVE-2024-9872: Improper Neutralization of Input During Web Page Generation
The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vcitasaveuserdatacallback function in all versions up to, and including, 4.5.1. This makes it possible for authenticated...
Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CVE-2024-53762
Cross-Site Request Forgery CSRF vulnerability in FasterThemes FastBook fastbook-responsive-appointment-booking-and-scheduling-system allows Stored XSS.This issue affects FastBook: from n/a through = 1.1...
PT-2024-35873
Name of the Vulnerable Software and Affected Versions FastBook – Responsive Appointment Booking and Scheduling System versions n/a through 1.1 Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in the Faster Themes FastBook – Responsive Appointment...
PT-2024-35609
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue concerns the Linux kernel's network scheduling subsystem, specifically the qdisc tree reduce backlog function. Changes to sch-q.qlen around this function need to occur before the...