CVE-2024-13037: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been classified as critical. Affected is the function attendancereport of the file /admin/report.php. The manipulation of the argument courseid leads to sql injection. It is possible to launch the attack...

1000 Projects Attendance Tracking Management System 注入漏洞

1000 Projects Attendance Tracking Management System is an open source attendance management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Attendance Tracking Management System version 1.0, which stems from an incorrect operation of the courseid parameter that can...

CVE-2024-13005

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/attendanceaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely...

CVE-2024-13005

creationtimestamp| type| source ---|---|--- 2024-12-29 07:35:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113734957541914206 2024-12-29 08:15:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3legladbxah2k 2024-12-29 09:50:59+00:00| seen|...

CVE-2024-13005

CVE-2024-13005 affects 1000 Projects Attendance Tracking Management System 1.0; the vulnerability is an SQL injection in /admin/attendance_action.php via the attendance_id parameter. Exploitation is remote and exploits have been disclosed. Multiple sources corroborate the issue and indicate high ...

CVE-2024-13005 1000 Projects Attendance Tracking Management System attendance_action.php sql injection

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/attendanceaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely...

CVE-2024-13005 1000 Projects Attendance Tracking Management System attendance_action.php sql injection

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/attendanceaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely...

PT-2024-17865 · Unknown · 1000 Projects Attendance Tracking Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Attendance Tracking Management System version 1.0 Description: A critical issue was found in the 1000 Projects Attendance Tracking Management System. This issue affects the file /admin/attendance action.php and is related to the...

CVE-2024-13005: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/attendanceaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely...

CVE-2024-56690

creationtimestamp| type| source ---|---|--- 2024-12-28 10:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leebitf7fi2e 2024-12-28 10:38:22+00:00| seen| https://infosec.exchange/users/cve/statuses/113730014565364789 2024-12-28 12:06:48+00:00| seen|...

CVE-2024-56672

creationtimestamp| type| source ---|---|--- 2024-12-27 15:21:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecc2z3o352f 2024-12-27 16:50:49+00:00| seen| https://t.me/cvedetector/13761 2025-04-12 00:10:16+00:00| seen|...

CVE-2024-56595

creationtimestamp| type| source ---|---|--- 2024-12-27 15:17:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecbv5nsmd22 2025-04-12 00:10:16+00:00| seen| https://gist.github.com/webmutation/894dd1a9a17615b7469198bb18bc3a16 2025-08-14 10:00:00+00:00| seen|...

CVE-2024-53234

creationtimestamp| type| source ---|---|--- 2024-12-27 14:18:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lec6lpi6aw2a 2024-12-27 18:07:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113726117319975093 2025-01-23 17:02:58+00:00|...

CVE-2024-53203

creationtimestamp| type| source ---|---|--- 2024-12-27 14:17:17+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lec6jeypzw22 2024-12-27 14:41:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113725306755141034 2024-12-27 16:07:08+00:00| seen|...

CVE-2024-53239

creationtimestamp| type| source ---|---|--- 2024-12-27 14:14:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113725200476661070 2024-12-27 14:18:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lec6m55od422 2024-12-27 16:00:42+00:00| seen|...

CVE-2024-12977

creationtimestamp| type| source ---|---|--- 2024-12-27 02:02:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113722323447112270 2024-12-27 02:15:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3leaw6lwpoc2i 2024-12-27 04:16:46+00:00| seen|...

GHSA-XX95-62H6-H7V3

creationtimestamp| type| source ---|---|--- 2024-12-26 22:03:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113721385324840578...

CVE-2024-12946

A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. This issue affects some unknown processing of the file /admin/adminaction.php. The manipulation of the argument adminusername leads to sql injection. The attack may be...

CVE-2024-12946

CVE-2024-12946 affects 1000 Projects Attendance Tracking Management System 1.0. The issue resides in the admin_action.php workflow, where manipulating the argument admin_user_name triggers an SQL injection. The vulnerability is exploitable remotely, and public disclosures exist. Multiple sources ...

CVE-2024-12946 1000 Projects Attendance Tracking Management System admin_action.php sql injection

A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. This issue affects some unknown processing of the file /admin/adminaction.php. The manipulation of the argument adminusername leads to sql injection. The attack may be...