CVE-2024-6471

CVE-2024-6471 affects SourceCodester Online Tours & Travels Management 1.0, specifically the sms_setting.php file. The vulnerability is caused by manipulation of the uname parameter, resulting in an SQL injection that can be exploited remotely. Public disclosures exist, indicating exploitation is...

CVE-2024-6470 playSMS Template injection

A vulnerability was found in playSMS 1.4.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php?app=main&inc=featureinboxgroup&op=list of the component Template Handler. The manipulation of the argument Receiver Number with the input id...

CVE-2024-6469 playSMS Template injection

A vulnerability was found in playSMS 1.4.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?app=main&inc=featurefirewall&op=firewalllist of the component Template Handler. The manipulation of the argument IP address with the...

CVE-2024-6469 playSMS Template injection

A vulnerability was found in playSMS 1.4.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?app=main&inc=featurefirewall&op=firewalllist of the component Template Handler. The manipulation of the argument IP address with the...

CVE-2024-6469

CVE-2024-6469 affects playSMS 1.4.3 in the Template Handler’s Firewall List function (endpoint: /index.php?app=main&inc=feature_firewall&op=firewall_list). The issue is an injection triggered by manipulating the id argument ({{id}}) and can be exploited remotely; the exploit has been disclosed pu...

CVE-2024-6453 itsourcecode Farm Management System sql injection

A vulnerability was found in itsourcecode Farm Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /quarantine.php?id=3. The manipulation of the argument pigno/breed/reason leads to sql injection. The attack can be launch...

CVE-2024-6453

CVE-2024-6453 affects itsourcecode Farm Management System 1.0. A SQL injection vulnerability exists in the file /quarantine.php?id=3 via manipulation of the parameters pigno, breed, or reason. The issue stems from lack of input validation, enabling remote exploitation. The attack vector is NETWOR...

CVE-2024-6452 linlinjava litemall AdminGoodscontroller.java sql injection

A vulnerability classified as critical was found in linlinjava litemall up to 1.8.0. Affected by this vulnerability is an unknown functionality of the file AdminGoodscontroller.java. The manipulation of the argument goodsId/goodsSn/name leads to sql injection. The attack can be launched remotely...

CVE-2024-6441 ORIPA LoaderXML.java deserialization

A vulnerability was found in ORIPA up to 1.72. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file src/main/java/oripa/persistence/doc/loader/LoaderXML.java. The manipulation leads to deserialization. The attack can be launched remotely...

CVE-2024-6441

The CVE-2024-6441 issue affects ORIPA up to v1.72, where deserialization in LoaderXML.java is exposed to remote attack. The vulnerability is caused by an unknown functionality in the LoaderXML.java path and can be triggered remotely. Upgrading to version 1.80 addresses the issue. Active exploitat...

CVE-2024-6441 ORIPA LoaderXML.java deserialization

A vulnerability was found in ORIPA up to 1.72. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file src/main/java/oripa/persistence/doc/loader/LoaderXML.java. The manipulation leads to deserialization. The attack can be launched remotely...

CVE-2024-6441 ORIPA LoaderXML.java deserialization

A vulnerability was found in ORIPA up to 1.72. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file src/main/java/oripa/persistence/doc/loader/LoaderXML.java. The manipulation leads to deserialization. The attack can be launched remotely...

CVE-2024-6440

A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Master.php?f=deletecategory. The manipulation of the argument id leads to sql injection. It is possible to launch the...

CVE-2024-6438

A vulnerability has been found in Hitout Carsale 1.0 and classified as critical. This vulnerability affects unknown code of the file OrderController.java. The manipulation of the argument orderBy leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2024-6440 SourceCodester Home Owners Collection Management System sql injection

A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Master.php?f=deletecategory. The manipulation of the argument id leads to sql injection. It is possible to launch the...

CVE-2024-6440 SourceCodester Home Owners Collection Management System sql injection

A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Master.php?f=deletecategory. The manipulation of the argument id leads to sql injection. It is possible to launch the...

CVE-2024-6440

CVE-2024-6440 affects SourceCodester Home Owners Collection Management System 1.0. Affected component: /classes/Master.php?f=delete_category; parameter id manipulation leads to SQL injection. Attack is possible remotely and exploitation has been disclosed publicly. Several connected documents con...

CVE-2024-6439 SourceCodester Home Owners Collection Management System unrestricted upload

A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Users.php?f=save. The manipulation of the argument img leads to unrestricted upload. The attack may be initiated...

CVE-2024-6439 SourceCodester Home Owners Collection Management System unrestricted upload

A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Users.php?f=save. The manipulation of the argument img leads to unrestricted upload. The attack may be initiated...

CVE-2024-6438

CVE-2024-6438 affects Hitout Carsale 1.0. The vulnerability resides in OrderController.java where manipulating the orderBy parameter leads to a SQL injection. Exploitation is remote and publicly disclosed (VDB-270166). Multiple connected records corroborate the issue with similar wording across N...