CVE-2024-3254

CVE-2024-3254 affects SourceCodester Internship Portal Management System 1.0. SQL injection via the admin/edit_admin.php file’s admin_id parameter is the root cause. The issue is exploitable remotely and has public disclosures. Connected sources do not provide a confirmed patch version; one PT Se...

CVE-2024-3253

A vulnerability classified as critical was found in SourceCodester Internship Portal Management System 1.0. This vulnerability affects unknown code of the file admin/addadmin.php. The manipulation of the argument name/username/password leads to sql injection. The attack can be initiated remotely...

CVE-2024-3253

CVE-2024-3253 affects SourceCodester Internship Portal Management System 1.0, specifically the vulnerable component in file admin/add_admin.php . The issue arises from manipulating the name/username/password parameters, enabling remote SQL injection. Multiple connected sources confirm a critical ...

CVE-2024-3253 SourceCodester Internship Portal Management System add_admin.php sql injection

A vulnerability classified as critical was found in SourceCodester Internship Portal Management System 1.0. This vulnerability affects unknown code of the file admin/addadmin.php. The manipulation of the argument name/username/password leads to sql injection. The attack can be initiated remotely...

CVE-2024-3253 SourceCodester Internship Portal Management System add_admin.php sql injection

A vulnerability classified as critical was found in SourceCodester Internship Portal Management System 1.0. This vulnerability affects unknown code of the file admin/addadmin.php. The manipulation of the argument name/username/password leads to sql injection. The attack can be initiated remotely...

CVE-2024-3252

A vulnerability classified as critical has been found in SourceCodester Internship Portal Management System 1.0. This affects an unknown part of the file admin/checkadmin.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-3252

SourceCodester Internship Portal Management System 1.0 contains a SQL injection in the admin/check_admin.php file triggered by the username/password parameters. The vulnerability allows remote exploitation with high impact to confidentiality, integrity, and availability; CVSSv3.1 base score up to...

CVE-2024-3252 SourceCodester Internship Portal Management System check_admin.php sql injection

A vulnerability classified as critical has been found in SourceCodester Internship Portal Management System 1.0. This affects an unknown part of the file admin/checkadmin.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-3252 SourceCodester Internship Portal Management System check_admin.php sql injection

A vulnerability classified as critical has been found in SourceCodester Internship Portal Management System 1.0. This affects an unknown part of the file admin/checkadmin.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack remotely...

CVE-2024-3251 SourceCodester Computer Laboratory Management System sql injection

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/?page=borrow/viewborrow. The manipulation of the argument id leads to sql injection. The attack may be...

CVE-2024-3251

Summary: CVE-2024-3251 affects SourceCodester Computer Laboratory Management System 1.0. Affected component: the file path /admin/?page=borrow/view_borrow where manipulating the id parameter allows SQL injection. The vulnerability is described as exploitable remotely, with the public disclosure o...

CVE-2024-3251 SourceCodester Computer Laboratory Management System sql injection

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/?page=borrow/viewborrow. The manipulation of the argument id leads to sql injection. The attack may be...

CVE-2024-3227

A vulnerability was found in Panwei eoffice OA up to 9.5. It has been declared as critical. This vulnerability affects unknown code of the file /general/system/interface/themeset/saveimage.php of the component Backend. The manipulation of the argument imagetype leads to path traversal:...

CVE-2024-3227 Panwei eoffice OA Backend save_image.php path traversal

A vulnerability was found in Panwei eoffice OA up to 9.5. It has been declared as critical. This vulnerability affects unknown code of the file /general/system/interface/themeset/saveimage.php of the component Backend. The manipulation of the argument imagetype leads to path traversal:...

CVE-2024-3227 Panwei eoffice OA Backend save_image.php path traversal

A vulnerability was found in Panwei eoffice OA up to 9.5. It has been declared as critical. This vulnerability affects unknown code of the file /general/system/interface/themeset/saveimage.php of the component Backend. The manipulation of the argument imagetype leads to path traversal:...

CVE-2024-3227

CVE-2024-3227 affects Panwei eoffice OA up to 9.5 (Backend) and involves a path traversal in file /general/system/interface/theme_set/save_image.php. The vulnerability is triggered by manipulating the argument image_type to navigate to a directory like ‘../filedir’. It is remotely exploitable and...

CVE-2024-3226

A vulnerability was found in Campcodes Online Patient Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/login.php. The manipulation of the argument password leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-3226

A vulnerability was found in Campcodes Online Patient Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/login.php. The manipulation of the argument password leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-3226

CVE-2024-3226 affects Campcodes Online Patient Record Management System 1.0. The vulnerability is a SQL injection in the password parameter of the /admin/login.php file. It can be triggered remotely; the attack does not require user interaction beyond sending crafted input. Multiple connected sou...

CVE-2024-3226 Campcodes Online Patient Record Management System login.php sql injection

A vulnerability was found in Campcodes Online Patient Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/login.php. The manipulation of the argument password leads to sql injection. It is possible to initiate the attack remotely. The...