6 matches found
CVE-2026-7592 itsourcecode Courier Management System edit_staff.php sql injection
A weakness has been identified in itsourcecode Courier Management System 1.0. This affects an unknown function of the file /editstaff.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public...
CVE-2026-7592 itsourcecode Courier Management System edit_staff.php sql injection
A weakness has been identified in itsourcecode Courier Management System 1.0. This affects an unknown function of the file /editstaff.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public...
CVE-2020-14942
Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py...
PT-2025-4074 · Unknown · Campcodes School Management
Name of the Vulnerable Software and Affected Versions: CampCodes School Management Software version 1.0 Description: A critical issue has been found in the Staff Handler component, specifically in an unknown function of the file "/edit-staff/". This leads to improper authorization and can be...
PT-2024-17838 · Codezips · Codezips Hospital Management System
Name of the Vulnerable Software and Affected Versions: CodeZips Hospital Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /staff.php. The manipulation of the tel argument leads to SQL injection. The attack c...
Sql injection
RemoteClinic version 2.0 contains a SQL injection vulnerability in the /staff/edit.php file...