10 matches found
CVE-2025-10625: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /user/dashboard.php?page=updateprofile. The manipulation of the argument phone results in sql injection. The attack may be launched remotely. The...
CVE-2023-50753: Improper Neutralization of Special Elements used in an SQL Command
Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the user/updateprofile.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2022-43050: Unrestricted Upload of File with Dangerous Type
Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component updateprofile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-43050
Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability in the component updateprofile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
Online Tours & Travels Management System 代码问题漏洞
Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A security vulnerability exists in Online Tours & Travels Management System v1.0, which originates from its component updateprofile.php that allows an attacker to exploit arbitrary fi...
PHPmotion <= 2.0 (update_profile.php) Remote Shell Upload Exploit
No description provided by source. ?php / ----------------------------------------------------------------- PHPmotion = 2.0 updateprofile.php Remote Shell Upload Exploit ----------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
CVE-2008-3117: Improper Input Validation
Unrestricted file upload vulnerability in updateprofile.php in PHPmotion 2.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a .php file with a content type of 1 image/gif, 2 image/jpeg, or 3 image/pjpeg, then accessing it via a direct request to the file unde...
PHPmotion <= 2.0 (update_profile.php) Remote Shell Upload Exploit
No description provided by source. ?php / ----------------------------------------------------------------- PHPmotion = 2.0 updateprofile.php Remote Shell Upload Exploit ----------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
PHPmotion 2.0 - 'update_profile.php' Arbitrary File Upload
= $limitsize 269. // Display file size error 270. // /////////////////////// 271. $show = 1; 272. $messagetype = $config"notificationsuccess";//the messsage displayed at the top coner 273. $errormessage = 'Your image is...
CVE-2006-7088: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to 1 logonuser.php and 2 updateprofile.php...