15979 matches found
CVE-2024-7321
A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulnerability affects unknown code of the file signup.php of the component User Registration Handler. The manipulation of the argument user leads to cross site scripting. The attack c...
CVE-2024-7321
A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulnerability affects unknown code of the file signup.php of the component User Registration Handler. The manipulation of the argument user leads to cross site scripting. The attack c...
CVE-2024-7320
A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affects an unknown part of the file /admin/index.php of the component Admin Login. The manipulation of the argument user leads to sql injection. It is possible to initiate the attac...
CVE-2024-7311 code-projects Online Bus Reservation Site register.php sql injection
A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file register.php. The manipulation of the argument Email leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-7310
A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file sortuser.php. The manipulation of the argument sort leads to cross site scripting. The attack can be initiated remotely. The exploit h...
CVE-2024-7309
A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. This affects an unknown part of the file entry.php. The manipulation of the argument school leads to cross site scripting. It is possible to initiate the attack remotely. The exploit h...
CVE-2024-7310
Affected product: SourceCodester Record Management System 1.0. Vulnerable component: sort_user.php (via the sort parameter). Root cause: lack of input validation/escaping allowing cross-site scripting (XSS). Impact: remote attacker can manipulate the sort value to inject script; exploitation is p...
CVE-2024-7310 SourceCodester Record Management System sort_user.php cross site scripting
A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file sortuser.php. The manipulation of the argument sort leads to cross site scripting. The attack can be initiated remotely. The exploit h...
CVE-2024-7309
SourceCodester Record Management System 1.0 has a cross-site scripting vulnerability in entry.php via the school parameter. The issue can be exploited remotely, and public disclosures (VDB-273201) exist. Multiple connected sources confirm the vulnerability specifics, but no product patch/version ...
GHSA-XHQW-4HCQ-FCVR Bolt CMS Cross-site Scripting vulnerability
UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic has been found in Bolt CMS 3.7.1. Affected is an unknown function of the file /bolt/editcontent/showcases of the component Showcase Creation Handler. The manipulation of the argument textarea leads to cross site scripting. It is...
CVE-2024-7308
A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /viewbill.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...
CVE-2024-7307
A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /managebilling.php. The manipulation of the argument id leads to sql injection. The attack can be launche...
CVE-2024-7308
CVE-2024-7308 affects SourceCodester Establishment Billing Management System 1.0. The vulnerability is an SQL injection in the /view_bill.php file, triggered by manipulating the id parameter. It is exploitable remotely, and the exploit has been disclosed publicly per the CVE records, with multipl...
CVE-2024-7308 SourceCodester Establishment Billing Management System view_bill.php sql injection
A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /viewbill.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...
CVE-2024-7307
Summary (CVE-2024-7307): A SQL injection vulnerability exists in SourceCodester Establishment Billing Management System v1.0, triggered by manipulating the id parameter in the file /manage_billing.php. The issue is exploitable remotely and affects an unknown functionality. Public exploitation det...
CVE-2024-7307 SourceCodester Establishment Billing Management System manage_billing.php sql injection
A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /managebilling.php. The manipulation of the argument id leads to sql injection. The attack can be launche...
CVE-2024-7307 SourceCodester Establishment Billing Management System manage_billing.php sql injection
A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /managebilling.php. The manipulation of the argument id leads to sql injection. The attack can be launche...
CVE-2024-7306 SourceCodester Establishment Billing Management System manage_block.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Establishment Billing Management System 1.0. Affected is an unknown function of the file /manageblock.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2024-7306 SourceCodester Establishment Billing Management System manage_block.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Establishment Billing Management System 1.0. Affected is an unknown function of the file /manageblock.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2024-7303 itsourcecode Online Blood Bank Management System Send Blood Request Page request.php cross site scripting
A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /request.php of the component Send Blood Request Page. The manipulation of the argument Address/bloodgroup leads to cross sit...