PT-2022-25871 · Unknown · Billing System Project

Name of the Vulnerable Software and Affected Versions: Billing System Project version 1.0 Description: A SQL injection issue was found in the Billing System Project. The vulnerability is exploitable via the id parameter at the "/phpinventory/edituser.php" API endpoint. This allows for potential...

CVE-2022-41437: Unrestricted Upload of File with Dangerous Type

Billing System Project v1.0 was discovered to contain a remote code execution RCE vulnerability via the component /phpaction/createProduct.php...

Billing System Project SQL注入漏洞

Billing System Project is a billing system project by Mayuri K. Individual Developer. Billing System Project v1.0 has a SQL injection vulnerability that stems from the id parameter in /phpinventory/edituser.php found to contain a SQL injection vulnerability...

CVE-2022-41440: Improper Neutralization of Special Elements used in an SQL Command

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editcategory.php...

CVE-2022-41439: Improper Neutralization of Special Elements used in an SQL Command

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/edituser.php...

Billing System Project has a remote code execution vulnerability

Billing System Project v1.0 is a billing system program. v1.0 of Billing System Project contains a remote code execution vulnerability that can be exploited by attackers to remotely execute code...

CVE-2022-3118 Sourcecodehero ERP System Project processlogin.php sql injection

A vulnerability was found in Sourcecodehero ERP System Project. It has been rated as critical. This issue affects some unknown processing of the file /pages/processlogin.php. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2022-3118: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Sourcecodehero ERP System Project. It has been rated as critical. This issue affects some unknown processing of the file /pages/processlogin.php. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. The exploit has been...

Sourcecodehero ERP System Project SQL注入漏洞

Sourcecodehero ERP System Project is a self-hosted ERP system from Sourcecodehero. Sourcecodehero ERP System Project suffers from a SQL injection vulnerability that originates from unknown processing in /pages/processlogin.php...

CVE-2022-29009: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication...

CVE-2021-27999

A SQL injection vulnerability was discovered in the editid parameter in Local Services Search Engine Management System Project 1.0. This vulnerability gives admin users the ability to dump all data from the database...

CVE-2021-28000

A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project 1.0 which allows remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address fields...

PT-2021-17706

Name of the Vulnerable Software and Affected Versions: Local Services Search Engine Management System Project version 1.0 Description: A persistent cross-site scripting issue was discovered, allowing remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address...

PT-2021-17705

Name of the Vulnerable Software and Affected Versions: Local Services Search Engine Management System Project version 1.0 Description: A SQL injection vulnerability was discovered in the editid parameter. This issue allows admin users to dump all data from the database. Recommendations: For Local...

CVE-2021-28000: Improper Neutralization of Input During Web Page Generation

A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project 1.0 which allows remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address fields...

CVE-2021-27999: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability was discovered in the editid parameter in Local Services Search Engine Management System Project 1.0. This vulnerability gives admin users the ability to dump all data from the database...

Student Management System Project PHP 1.0 Cross Site Scripting

For CVE-2020-25955: Exploit Title: student management system project PHP - Stored cross-site scripting Exploit Author: Krishna Yadav Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/14443/student-management-system-project-php.html Version: 1.0 Test...

PT-2020-16251

Name of the Vulnerable Software and Affected Versions Online Bus Booking System Project Using PHP/MySQL version 1.0 Description The issue allows remote attackers to bypass authentication and execute arbitrary SQL commands via the login page by placing a SQL injection payload. This can lead to...

CVE-2020-25889: Improper Neutralization of Special Elements used in an SQL Command

Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege...

CVE-2020-25955: Improper Neutralization of Input During Web Page Generation

SourceCodester Student Management System Project in PHP version 1.0 is vulnerable to stored a cross-site scripting XSS via the 'add subject' tab...