CVE-2024-10557

受影响版本： 血液银行管理系统 ：1.0 漏洞信息： 漏洞类型： 跨站请求伪造（CSRF） 严重性： 高 状态： 未修补 脆弱端点： 路径： /file/updateprofile.php 漏洞描述： 端点 /file/updateprofile.php 存在一个CSRF漏洞，允许远程用户更新医院用户的详细信息，并可能导致账户接管，因为攻击者可以更新从电子邮件到密码的所有信息，从而有效增加账户接管的机会。 成功利用可能导致代表受害者执行未授权操作，例如删除数据 。此外，受害者访问带有payload的恶意网站也可触发此漏洞。 概念验证（PoC）： 下面是一个CSRF POC攻击...

CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability

CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability 漏洞作者：ersinerenler 厂商主页 https://code-projects.org/blood-bank-in-php-with-source-code 软件链接 https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip 概述 Code-Projects Blood Bank V1.0...

CVE-2025-63533

A cross-site scripting XSS vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and rprofile.php components. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript...

EUVD-2023-50282

Malicious code in bioql PyPI...

CVE-2025-9730 itsourcecode Apartment Management System updateProfile.php sql injection

A vulnerability was found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /ajax/updateProfile.php. The manipulation of the argument userid results in sql injection. It is possible to launch the attack remotely. The exploit has been made...

CVE-2025-9730

CVE-2025-9730 affects itsourcecode Apartment Management System 1.0. The vulnerability lies in an unknown function in /ajax/updateProfile.php where manipulating the user_id parameter leads to SQL injection. This can be exploited remotely and an exploit has been publicized. CVSS v3.1 base metrics i...

CVE-2025-9730 itsourcecode Apartment Management System updateProfile.php sql injection

A vulnerability was found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /ajax/updateProfile.php. The manipulation of the argument userid results in sql injection. It is possible to launch the attack remotely. The exploit has been made...

CVE-2025-3042

A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. This vulnerability affects unknown code of the file /student/updateprofile.php. The manipulation of the argument pic leads to unrestricted upload. The attack can be initiated remotely. The exploit...

CVE-2025-3042 Project Worlds Online Time Table Generator updateprofile.php unrestricted upload

A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. This vulnerability affects unknown code of the file /student/updateprofile.php. The manipulation of the argument pic leads to unrestricted upload. The attack can be initiated remotely. The exploit...

CVE-2024-10557

A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /file/updateprofile.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely...

CVE-2023-46020

Cross Site Scripting XSS in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'rename', 'remail', 'rphone' and 'rcity' parameters...

Exploit for Cross-site Scripting in Code-Projects Blood_Bank

CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-...

WikiWebHelp v0. 3. 3 CSRF attack to modify the password vulnerability-vulnerability warning-the black bar safety net

WikiWebHelp v0. 3. 3 CMS the presence of CSRF（cross-site request forgery attack, the remote can modify the user password Exp: form name="CSRF" method="post" action=" http://127.0.0.1/wwh/handlers/updateprofile.php?id=1" input type='hidden' name='pass' value='password' input type='hidden'...