CVE-2024-3688

CVE-2024-3688 affects Xiamen Four-Faith RMP Router Management Platform 5.2.2. The vulnerability is a SQL injection in /Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState= where manipulating the groupId parameter enables remote exploitation. Multiple connected sources corroborate...

CVE-2024-3688 Xiamen Four-Faith RMP Router Management Platform sql injection

A vulnerability was found in Xiamen Four-Faith RMP Router Management Platform 5.2.2. It has been declared as critical. This vulnerability affects unknown code of the file /Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState=. The manipulation of the argument groupId leads to sql...

CVE-2024-3687

The CVE-2024-3687 entry concerns bihell Dice 3.1.0, specifically the Comment Handler component. The issue is a cross-site scripting vulnerability exploitable remotely, with public disclosure of the exploit in available references. Affected functionality is unclear beyond a general “Comment Handle...

CVE-2024-3687 bihell Dice Comment cross site scripting

A vulnerability was found in bihell Dice 3.1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public an...

CVE-2024-3686 DedeCMS update_guide.php path traversal

A vulnerability has been found in DedeCMS 5.7.112-UTF8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file updateguide.php. The manipulation of the argument files leads to path traversal: '../filedir'. The attack can be launched remotely. The...

CVE-2024-3686 DedeCMS update_guide.php path traversal

A vulnerability has been found in DedeCMS 5.7.112-UTF8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file updateguide.php. The manipulation of the argument files leads to path traversal: '../filedir'. The attack can be launched remotely. The...

CVE-2024-3686

CVE-2024-3686 affects DedeCMS 5.7.112-UTF8. The issue lies in update_guide.php where the files argument enables path traversal ("../filedir"), enabling remote manipulation. Public exploits have been disclosed. Impact is indicated as HIGH for integrity; confidentiality/availability not impacted pe...

CVE-2024-3685 DedeCMS stepselect_main.php sql injection

A vulnerability, which was classified as critical, was found in DedeCMS 5.7.112-UTF8. Affected is an unknown function of the file stepselectmain.php. The manipulation of the argument ids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2024-3685

CVE-2024-3685 affects DedeCMS 5.7.112-UTF8. The vulnerability is in an unknown function of stepselect_main.php where manipulation of the ids argument leads to SQL injection. It can be exploited remotely and the public exploit is disclosed. Connected documents confirm the vulnerability details and...

CVE-2024-3621

A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been classified as critical. This affects an unknown part of the file /control/registercase.php. The manipulation of the argument...

CVE-2024-3621 SourceCodester Kortex Lite Advocate Office Management System register_case.php sql injection

A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been classified as critical. This affects an unknown part of the file /control/registercase.php. The manipulation of the argument...

CVE-2024-3621

The CVE-2024-3621 issue affects SourceCodester Kortex Lite Advocate Office Management System v1.0, with a SQL injection in the /control/register_case.php file. The vulnerability arises from manipulation of multiple input parameters (title, case_no, client_name, court, case_type, case_stage, legel...

CVE-2024-3621 SourceCodester Kortex Lite Advocate Office Management System register_case.php sql injection

A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been classified as critical. This affects an unknown part of the file /control/registercase.php. The manipulation of the argument...

CVE-2024-3619

A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /control/addcasestage.php. The manipulation of the argument cname leads to sql injection. The attac...

CVE-2024-3619

A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /control/addcasestage.php. The manipulation of the argument cname leads to sql injection. The attac...

CVE-2024-3618

A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Affected is an unknown function of the file /control/activatecase.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

CVE-2024-3620 SourceCodester Kortex Lite Advocate Office Management System adds.php sql injection

A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /control/adds.php. The manipulation of the argument name/gender/dob/email/mobile/address leads to sql injectio...

CVE-2024-3619 SourceCodester Kortex Lite Advocate Office Management System addcase_stage.php sql injection

A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /control/addcasestage.php. The manipulation of the argument cname leads to sql injection. The attac...

CVE-2024-3619 SourceCodester Kortex Lite Advocate Office Management System addcase_stage.php sql injection

A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /control/addcasestage.php. The manipulation of the argument cname leads to sql injection. The attac...

CVE-2024-3619

CVE-2024-3619 affects SourceCodester Kortex Lite Advocate Office Management System 1.0. The vulnerability is a SQL injection in the file /control/addcase_stage.php triggered by the cname parameter. Affected functionality is unknown; the issue can be exploited remotely and exploitation has been di...