PT-2024-17892 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical issue has been found in the code-projects Chat System, affecting the /admin/update user.php file. The manipulation of the id argument leads to SQL injection. This issue can be...

PT-2024-17863 · Unknown · 1000 Projects Portfolio Management System Mca

Name of the Vulnerable Software and Affected Versions: 1000 Projects Portfolio Management System MCA version 1.0 Description: A critical issue affects some unknown functionality of the file /update ed.php. The manipulation of the argument e id leads to SQL injection. The attack may be launched...

CVE-2024-12487

A vulnerability has been found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/roomupdate.php. The manipulation of the argument id leads to sql injection. The attack can be...

CVE-2024-8360

Visteon Infotainment REFLASHDDUExtractFile Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Visteon Infotainment systems. Authentication is not required to exploit this vulnerabilit...

CVE-2024-8358

Visteon Infotainment UPDATESExtractFile Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Visteon Infotainment systems. Authentication is not required to exploit this vulnerability...

Codezips Pharmacy Management System SQL注入漏洞

Codezips Pharmacy Management System is a pharmacy management system from Codezips. A SQL injection vulnerability exists in Codezips Pharmacy Management System version 1.0, which stems from a parameter id in the file produc/update.php that can lead to SQL injection...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) is related to access control errors, allowing attackers to execute arbitrary code.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to access control bugs. Exploiting this vulnerability can allow an attacker to execute arbitrary code by replacing th...

CVE-2024-8564

A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/update.php. The manipulation of the argument tblpersonid/firstname/middlename/lastname leads to sql injection. The attack can be initiated...

CBL Mariner 2.0 Security Update: patch (CVE-2019-13636)

The version of patch installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-13636 advisory. - In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libarchive (SUSE-SU-2024:2171-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2171-1 advisory. - CVE-2024-20696: Fixed heap based out-of-bounds write bsc1225971. Tenable has extracted the preceding...

Foxit PDF Editor < 11.2.10 Vulnerability

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 11.2.10. It is, therefore affected by vulnerability: - A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability...

CVE-2024-2604

A vulnerability was found in SourceCodester File Manager App 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/update-file.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit...

CVE-2024-2604 SourceCodester File Manager App update-file.php unrestricted upload

A vulnerability was found in SourceCodester File Manager App 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/update-file.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit...

PT-2024-21287 · Sourcecodester · Sourcecodester File Manager App

Name of the Vulnerable Software and Affected Versions: SourceCodester File Manager App version 1.0 Description: A critical issue has been found in the SourceCodester File Manager App, affecting the /endpoint/update-file.php file. The manipulation of the file argument leads to unrestricted upload...

Online-Book-Store-Website Code Issue Vulnerability

Online-Book-Store-Website is an online bookstore website. A code issue vulnerability exists in version 1.0 of Online-Book-Store-Website that stems from an unrestricted upload in the updateimage parameter of the /productupdate.php?update=1 file...

PT-2024-21903 · Pretix · Pretix

Name of the Vulnerable Software and Affected Versions: pretix versions prior to 2024.1.1 Description: The issue is related to the mishandling of file validation. Recommendations: For versions prior to 2024.1.1, update to version 2024.1.1 or later to resolve the issue...

Projectworlds Online Examination System SQL Injection Vulnerability

Projectworlds Online Examination System is an online examination system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Online Examination System v1.0, which stems from the "qid" parameter of update.php not validating received characters and sending them to the...

Voovi Security Breach

Voovi is an open source social networking script from Sourceforge. A security vulnerability exists in Voovi version 1.0, which stems from a SQL injection vulnerability in update.php...

The vulnerability of the file edit_update.php script in the SourceCodester Inventory Management System allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the file editupdate.php script in the SourceCodester Inventory Management System is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

SMB Relaying Attack

firefox-esr is vulnerable to SMB Relaying Attack. A local attacker can deceive the Mozilla Maintenance Service into applying an unsigned update file by directing the service to an update file hosted on a malicious SMB server. This manipulation is possible because the service's requested write-loc...