PT-2023-25532 · Sourcecodester · Sourcecodester Student Study Center Desk Management System

Name of the Vulnerable Software and Affected Versions: sourcecodester Student Study Center Desk Management System version 1.0 Description: The issue allows attackers to run arbitrary code via a crafted GET request to the web application URL. This is a Cross Site Scripting XSS vulnerability, which...

PT-2023-28167 · Sourcecodester · Sourcecodester Resort Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Resort Reservation System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Resort Reservation System, affecting the file view fee.php. The manipulation of the id argument leads to SQL...

PT-2023-27803 · Phpjabbers · Php Jabbers Shuttle Booking

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Shuttle Booking Software version 1.0 Description: A vulnerability was found in the software, classified as problematic, affecting an unknown part of the file /index.php. The manipulation leads to cross site scripting, and it is...

PT-2023-13041 · Rtx Trap · Rtx Trap

Name of the Vulnerable Software and Affected Versions: RTX TRAP version 1.0 Description: The issue is related to host header poisoning. Recommendations: For RTX TRAP version 1.0, consider restricting access to vulnerable endpoints to minimize the risk of exploitation. At the moment, there is no...

PT-2022-27109 · Unknown · Book Store Management System

Name of the Vulnerable Software and Affected Versions: Book Store Management System version 1.0 Description: The issue concerns hardcoded credentials in the system, allowing attackers to escalate privileges and access the admin panel. Recommendations: For Book Store Management System version 1.0,...

PT-2022-26231 · Unknown · Online Birth Certificate Management System

Name of the Vulnerable Software and Affected Versions: Online Birth Certificate Management System version 1.0 Description: The issue is related to a persistent Cross Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the system, which will be executed ...

PT-2022-23551 · Unknown · Simple Task Scheduling System

Name of the Vulnerable Software and Affected Versions: Simple Task Scheduling System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete student" endpoint. Recommendations: Fo...

Blood Bank System 1.0 - SQL Injection / Authentication Bypass Vulnerabilities

Exploit Title: Blood Bank System 1.0 - SQL Injection / Authentication Bypass Exploit Author: Nitin Sharma vidvansh Vendor Homepage: https://code-projects.org/blood-bank-in-php-with-source-code/ Software Link : https://download.code-projects.org/details/f44a4ba9-bc33-48c3-b030-02f62117d230 Version...

Travel Management System 1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Travel Management System v1.0 - SQLi Authentication Bypass Exploit Author: Adeeb Shah @hyd3sec and Bobby Cooke boku Vendor Homepage: https://www.projectsworld.in Software Link:...

Travel Management System 1.0 Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Travel Management System v1.0 - Unauthenticated Remote Code Execution Exploit Author: Adeeb Shah @hyd3sec & Bobby Cooke boku Vulnerability Discovery: Adeeb Shah @hyd3sec Date: August 10, 2020 Vendor Homepage:...

CVE-2018-18802

CVE-2018-18802 affects the Tubigan “Welcome to our Resort” 1.0 software, with a CSRF flaw that can be exploited via admin/mod_users/controller.php?action=edit. The initial description confirms CSRF as the vulnerability type; Red Hat/NVD entries corroborate this. CVSS metrics are provided: CVSS v2...

Boxoft WAV To WMA Converter 1.0 Buffer Overflow

Exploit Title: Boxoft wav-wma Converter - Local Buffer Overflow SEH Date: 2018-07-08 Software Link: http://www.boxoft.com/wav-to-wma/ Software Version:1.0 Exploit Author: Achilles Target: Windows 7 x64 CVE: Description: A malicious .wav file cause this vulnerability. Category: Local Exploit buffe...

Co-work Space Search Script 1.0 - 'city' SQL Injection

Exploit Title: Co-work Space Search Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/co-work-space-search-script/ Demo: http://ordermanagementscript.com/demo/co-work-space/ Version: 1.0...

RSS-aggregator 1.0 - IdFlux SQL Injection

RSS-aggregator 1.0 - IdFlux SQL Injection source: https://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit...