PT-2024-28866

Name of the Vulnerable Software and Affected Versions Kashipara Online Exam System version 1.0 Description A SQL injection vulnerability in "/admin/quizquestion.php" allows remote attackers to execute arbitrary SQL commands via the eid parameter. Recommendations For Kashipara Online Exam System...

WordPress Slider by 10Web plugin <= 1.2.57 - Authenticated (Contributor+) SQL Injection via id Parameter vulnerability

Authenticated Contributor+ SQL Injection via id Parameter vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Slider by 10Web versions = 1.2.57...

OLE DB driver for Code Execution

The vulnerability of the OLE DB driver for SQL Server is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

OLE DB driver for SQL Server Code Execution

The vulnerability of the OLE DB driver for SQL Server is related to buffer overflow in the “heap”. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

PT-2024-38373 · Avaya · Avaya Aura System Manager

Name of the Vulnerable Software and Affected Versions: Avaya Aura System Manager versions 10.1.x.x through 10.2.x.x Avaya Aura System Manager versions prior to 10.1 Description: A SQL injection issue was discovered, allowing a command line interface user with administrative privileges to execute...

PT-2024-29316 · Unknown · Kashipara Responsive School Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Responsive School Management System version 1.0 Description: A SQL injection issue allows an attacker to execute arbitrary SQL commands via the username parameter in the /smsa/student login.php endpoint. This can lead to data theft...

WordPress plugin Slider by 10Web – Vulnerability in the responsive image slider

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2024-33964

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in '/admin/modusers/index.php'...

CVE-2024-33960

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'end' in...

CVE-2024-7498

A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been classified as critical. Affected is the function login/login2 of the file /admin/login.php of the component Admin Login Page. The manipulation of the argument username leads to sql injection. It is possible to...

OLE DB driver for SQL Server Code Execution

The vulnerability of the OLE DB driver for SQL Server is related to buffer overflow in the “heap”. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

PT-2024-5584

Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.14 Django versions 5.0 through 5.0.7 Description The issue is related to SQL injection in the QuerySet.values and values list methods on models with a JSONField. This vulnerability can be exploited by passing a...

Fedora: Security Advisory (FEDORA-2024-c27b82d702)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-7449

A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

Computer Laboratory Management System security vulnerabilities

Computer Laboratory Management System is a computer laboratory management system. A security vulnerability exists in Computer Laboratory Management System version 1.0, which originates from vulnerability to SQL injection attacks...

PT-2024-22383 · Azuresoft · Azuresoft Myhorus

Name of the Vulnerable Software and Affected Versions: AzureSoft MyHorus version 4.3.5 Description: A SQL injection issue allows authenticated users to execute arbitrary SQL commands. Recommendations: For AzureSoft MyHorus version 4.3.5, update to a newer version that contains a fix for this issu...

SourceCodester Simple Realtime Quiz System SQL Injection Vulnerability

SourceCodester Simple Realtime Quiz System is a real-time quiz system from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Simple Realtime Quiz System version 1.0, which stems from an SQL injection vulnerability in the id parameter of the /managequestion.php file...

Horizon Business Services Caterease security vulnerabilities

Horizon Business Services Caterease is an event planning and catering software from Horizon Business Services, USA. A security vulnerability exists in Horizon Business Services Caterease versions 16.0.1.1663 through 24.0.1.2405 and later versions, which stems from improper neutralization of...

BM SOFT BMPlanning security vulnerabilities

BM SOFT BMPlanning is a powerful resource planning tool from the French company BM SOFT. A security vulnerability exists in BM SOFT BMPlanning version 1.0.0.1, which originates from the presence of a SQL injection vulnerability that allows an authenticated user to execute arbitrary SQL commands...

CVE-2024-7366

A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?action=login of the component Login. The manipulation of the argument username leads to sql injection. It is possible to...