CVE-2023-7212

A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112. Affected is an unknown function of the file fileclass.php of the component Backend. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the...

Cross site scripting

A vulnerability was found in Kashipara Food Management System up to 1.0. It has been rated as problematic. This issue affects some unknown processing of the file partysubmit.php. The manipulation of the argument partyaddress leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2024-0284 Kashipara Food Management System party_submit.php cross site scripting

A vulnerability was found in Kashipara Food Management System up to 1.0. It has been rated as problematic. This issue affects some unknown processing of the file partysubmit.php. The manipulation of the argument partyaddress leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2023-7212 DeDeCMS Backend file_class.php unrestricted upload

A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112. Affected is an unknown function of the file fileclass.php of the component Backend. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2024-0282

A vulnerability was found in Kashipara Food Management System up to 1.0. It has been classified as problematic. This affects an unknown part of the file addmaterialsubmit.php. The manipulation of the argument tin leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2024-0283

A vulnerability was found in Kashipara Food Management System up to 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file partydetails.php. The manipulation of the argument partyname leads to cross site scripting. The attack can be initiated remotely. The...

Cross site scripting

A vulnerability was found in Kashipara Food Management System up to 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file partydetails.php. The manipulation of the argument partyname leads to cross site scripting. The attack can be initiated remotely. The...

Cross site scripting

A vulnerability was found in Kashipara Food Management System up to 1.0. It has been classified as problematic. This affects an unknown part of the file addmaterialsubmit.php. The manipulation of the argument tin leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2024-0283 Kashipara Food Management System party_details.php cross site scripting

A vulnerability was found in Kashipara Food Management System up to 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file partydetails.php. The manipulation of the argument partyname leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2024-0282 Kashipara Food Management System addmaterialsubmit.php cross site scripting

A vulnerability was found in Kashipara Food Management System up to 1.0. It has been classified as problematic. This affects an unknown part of the file addmaterialsubmit.php. The manipulation of the argument tin leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2024-0282

Kashipara Food Management System (version up to 1.0) contains a cross-site scripting vulnerability in addmaterialsubmit.php via the tin parameter. The issue arises from insufficient input handling, enabling an attacker to inject arbitrary scripts into a victim’s browser. The vulnerability is expl...

CVE-2024-0281

A vulnerability was found in Kashipara Food Management System up to 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file loginCheck.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. The exploit h...

Sql injection

A vulnerability was found in Kashipara Food Management System up to 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file loginCheck.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. The exploit h...

CVE-2024-0281

The CVE-2024-0281 entry concerns Kashipara Food Management System (up to 1.0). The affected component is the loginCheck.php file, where manipulation of the password parameter enables a SQL injection. Several connected sources confirm this issue and note remote feasibility and public disclosure. T...

CVE-2024-0281 Kashipara Food Management System loginCheck.php sql injection

A vulnerability was found in Kashipara Food Management System up to 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file loginCheck.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. The exploit h...

CVE-2024-0281 Kashipara Food Management System loginCheck.php sql injection

A vulnerability was found in Kashipara Food Management System up to 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file loginCheck.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. The exploit h...

CVE-2024-0279

A vulnerability, which was classified as critical, was found in Kashipara Food Management System up to 1.0. Affected is an unknown function of the file itemlistedit.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-0279

A vulnerability, which was classified as critical, was found in Kashipara Food Management System up to 1.0. Affected is an unknown function of the file itemlistedit.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-0278

A vulnerability, which was classified as critical, has been found in Kashipara Food Management System up to 1.0. This issue affects some unknown processing of the file partylisteditsubmit.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

Sql injection

A vulnerability, which was classified as critical, was found in Kashipara Food Management System up to 1.0. Affected is an unknown function of the file itemlistedit.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...