13 matches found
CVE-2026-2190: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in itsourcecode School Management System 1.0. This impacts an unknown function of the file /ramonsys/user/controller.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been released to the...
CVE-2025-13299: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. This impacts an unknown function of the file /user/controller.php. Executing a manipulation can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used...
CVE-2025-11078: Unrestricted Upload of File with Dangerous Type
A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/controller.php?action=photos. The manipulation of the argument photo leads to unrestricted upload. The attack is possible to be carried out...
CVE-2024-8465: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability, by which an attacker could send a specially designed query through userid parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it...
CVE-2024-2672
CVE-2024-2672 affects Campcodes Online Job Finder System 1.0. The Red Hat and vendor records confirm a SQL injection vulnerability in the /admin/user/controller.php file, triggered by manipulating the UESRID parameter. The issue is exploitable remotely and, per disclosures, the exploit is public....
CVE-2024-2672 Campcodes Online Job Finder System controller.php sql injection
A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/user/controller.php. The manipulation of the argument UESRID leads to sql injection. The attack may be launched remotely. The...
CVE-2024-2672: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/user/controller.php. The manipulation of the argument UESRID leads to sql injection. The attack may be launched remotely. The...
CVE-2023-1569
A vulnerability classified as problematic was found in SourceCodester E-Commerce System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/user/controller.php?action=edit. The manipulation of the argument UNAME with the input alert'1' leads to cross site scripting...
CVE-2023-1569: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in SourceCodester E-Commerce System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/user/controller.php?action=edit. The manipulation of the argument UNAME with the input leads to cross site scripting. The attac...
CVE-2019-18280: Cross-Site Request Forgery (CSRF)
Sourcecodester Online Grading System 1.0 is affected by a Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code via a crafted HTML page, as demonstrated by a Create User action at the...
Cross site request forgery (csrf)
School Event Management System 1.0 allows CSRF via user/controller.php?action=edit...
PT-2018-14658
Name of the Vulnerable Software and Affected Versions School Event Management System version 1.0 Description The issue allows for CSRF via the "user/controller.php?action=edit" endpoint, potentially enabling unauthorized modifications. Recommendations For School Event Management System version 1....