577 matches found
Sql injection
SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...
Cross site scripting
Cross Site Scripting XSS vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed...
Scholars Tracking System 安全漏洞
Scholars Tracking System is a scholars tracking system by the individual developer Fabian Ros. Scholars Tracking System suffers from a SQL injection vulnerability that can be exploited by an attacker to send crafted SQL statements to Eligibility Information Update...
Scholars Tracking System 安全漏洞
Scholars Tracking System is a scholars tracking system by the individual developer Fabian Ros. Scholars Tracking System version 1.0 suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements, which can be exploited by an...
Scholars Tracking System 安全漏洞
Scholars Tracking System is a scholars tracking system by the individual developer Fabian Ros. Scholars Tracking System suffers from a SQL injection vulnerability that can be exploited by an attacker to send specially crafted SQL statements to Personal Information Update messages...
Scholars Tracking System 安全漏洞
Scholars Tracking System is a scholars tracking system by the individual developer Fabian Ros. Scholars Tracking System version 1.0 suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be...
CVE-2024-24101
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
CVE-2024-24093
SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...
CVE-2024-24092
SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via login.php...
CVE-2024-24092
The Scholars Tracking System version 1.0 by Fabian Ros is vulnerable to SQL Injection due to a lack of validation of externally entered SQL statements. Attackers can exploit this via the login.php endpoint to execute illegal SQL commands, which may lead to stealing sensitive database data or runn...
CVE-2024-24093
The Code-projects Scholars Tracking System version 1.0 is vulnerable to a SQL Injection flaw. An attacker can send specially crafted SQL statements via the Personal Information Update information/messages, potentially leading to unauthorized access and data manipulation or allowing the execution ...
CVE-2024-24097
A Cross-Site Scripting (XSS) vulnerability exists in Code-projects Scholars Tracking System 1.0 , developed by Fabian Ros. The flaw stems from a lack of effective filtering and escaping of user-supplied data, which allows an attacker to inject a crafted payload to execute arbitrary web scripts or...
CVE-2024-24101
Affected software: Code-projects Scholars Tracking System 1.0. Vulnerability: SQL Injection in Eligibility Information Update. Root cause not explicitly stated in the provided documents. Impact (as stated): High confidentiality, integrity, and availability impact per NVD CVSS v3.1 metrics (9.8 CR...
CVE-2024-24093
SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...
CVE-2024-24101
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
CVE-2024-24092: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via login.php...
PT-2024-20272
Name of the Vulnerable Software and Affected Versions Code-projects Scholars Tracking System version 1.0 Description The issue concerns SQL Injection under the Eligibility Information Update feature. This allows for potential manipulation of database queries, which could lead to unauthorized data...
CVE-2024-24101: Improper Neutralization of Special Elements used in an SQL Command
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
CVE-2024-24093: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...