CVE-2024-10354

源代码 汽油泵管理软件免费下载 | SourceCodester 描述 sourcecodester 汽油泵管理软件 v1.0 中存在 SQL 注入漏洞，该漏洞被评为高危，影响 admin\print.php 文件中的未知功能，使用参数 id 构造恶意 SQL 语句以获取敏感信息，从而造成危害。 漏洞分析 admin\print.php 此处，用户输入 $POST'id' 被直接拼接到 SQL 查询语句中，显然容易受到 SQL 注入攻击。 漏洞复现 root@kitploit: POST /admin/print.php HTTP/1.1 Host: 10.151.167.168:667...

CVE-2024-2061

A vulnerability classified as critical was found in SourceCodester Petrol Pump Management Software 1.0. This vulnerability affects unknown code of the file /admin/editsupplier.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has be...

EUVD-2024-33088

Malicious code in bioql PyPI...

EUVD-2024-33061

Malicious code in bioql PyPI...

EUVD-2024-33089

Malicious code in bioql PyPI...

CVE-2024-2060

A vulnerability classified as critical has been found in SourceCodester Petrol Pump Management Software 1.0. This affects an unknown part of the file /admin/app/logincrud.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-10407

A vulnerability, which was classified as critical, was found in SourceCodester Petrol Pump Management Software 1.0. This affects an unknown part of the file /admin/editcustomer.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-2058

A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/product.php. The manipulation of the argument photo leads to unrestricted upload. The attack can be...

CVE-2024-10407

CVE-2024-10407 affects SourceCodester Petrol Pump Management Software 1.0. The vulnerability is a SQL injection in the /admin/edit_customer.php file, triggered by manipulating the id parameter, which can be exploited remotely. The exploit has been publicly disclosed. Public details do not specify...

CVE-2024-10406

A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/editfuel.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

CVE-2024-10406 SourceCodester Petrol Pump Management Software edit_fuel.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/editfuel.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

CVE-2024-10406

Summary (CVE-2024-10406) : A critical SQL injection vulnerability affects SourceCodester Petrol Pump Management Software 1.0 via the file /admin/edit_fuel.php, where manipulating the id parameter enables remote exploitation. Public exploits have been disclosed. Connected sources also reiterate th...

PT-2024-16249 · Sourcecodester · Sourcecodester Petrol Pump Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Petrol Pump Management Software version 1.0 Description: A critical issue has been found in the software, affecting some unknown functionality of the file /admin/edit fuel.php. The manipulation of the id argument leads to sql...

CVE-2024-10380

A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/ajaxproduct.php. The manipulation of the argument dropservices leads to sql injection. The attack may be...

CVE-2024-10380 SourceCodester Petrol Pump Management Software ajax_product.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/ajaxproduct.php. The manipulation of the argument dropservices leads to sql injection. The attack may be...

CVE-2024-10354

A vulnerability classified as critical was found in SourceCodester Petrol Pump Management Software 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/print.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...

CVE-2024-10354

CVE-2024-10354 affects SourceCodester Petrol Pump Management Software v1.0. The issue is in the file /admin/print.php where manipulating the id parameter enables a SQL injection, with remote attack capability and public exploitation disclosure. Multiple connected sources confirm the vulnerability...

CVE-2024-28558: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin/app/webcrud.php...

CVE-2024-2063

A vulnerability, which was classified as problematic, was found in SourceCodester Petrol Pump Management Software 1.0. Affected is an unknown function of the file /admin/app/profilecrud.php. The manipulation of the argument username leads to cross site scripting. It is possible to launch the atta...

CVE-2024-2063

A vulnerability, which was classified as problematic, was found in SourceCodester Petrol Pump Management Software 1.0. Affected is an unknown function of the file /admin/app/profilecrud.php. The manipulation of the argument username leads to cross site scripting. It is possible to launch the atta...