CVE-2024-0274 Kashipara Food Management System billAjax.php sql injection

A vulnerability was found in Kashipara Food Management System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file billAjax.php. The manipulation of the argument itemname leads to sql injection. The attack can be launched remotely. Th...

Sql injection

A vulnerability was found in Kashipara Food Management System up to 1.0 and classified as critical. This issue affects some unknown processing of the file addmaterialsubmit.php. The manipulation of the argument materialname leads to sql injection. The attack may be initiated remotely. The exploit...

Sql injection

A vulnerability was found in Kashipara Food Management System up to 1.0. It has been classified as critical. Affected is an unknown function of the file addwasteentry.php. The manipulation of the argument itemname leads to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2024-0273

CVE-2024-0273 affects Kashipara Food Management System (up to v1.0). Affected component: addwaste_entry.php; vulnerability arises from unsafely handling the item_name parameter, enabling SQL injection. Root cause: lack of input validation/parameterization in the affected function, allowing an att...

CVE-2024-0273 Kashipara Food Management System addwaste_entry.php sql injection

A vulnerability was found in Kashipara Food Management System up to 1.0. It has been classified as critical. Affected is an unknown function of the file addwasteentry.php. The manipulation of the argument itemname leads to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2024-0272

CVE-2024-0272 affects Kashipara Food Management System up to version 1.0. The issue is a SQL injection in addmaterialsubmit.php caused by insufficient validation of the material_name parameter, enabling remote exploitation. Publicly disclosed exploit exists. The vulnerability may allow an attacke...

CVE-2024-0272 Kashipara Food Management System addmaterialsubmit.php sql injection

A vulnerability was found in Kashipara Food Management System up to 1.0 and classified as critical. This issue affects some unknown processing of the file addmaterialsubmit.php. The manipulation of the argument materialname leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2024-0272 Kashipara Food Management System addmaterialsubmit.php sql injection

A vulnerability was found in Kashipara Food Management System up to 1.0 and classified as critical. This issue affects some unknown processing of the file addmaterialsubmit.php. The manipulation of the argument materialname leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2023-7210

A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to initiate the attack remotely. The...

CVE-2023-7211

A vulnerability was found in Uniway Router 2.0. It has been declared as critical. This vulnerability affects unknown code of the component Administrative Web Interface. The manipulation leads to reliance on ip address for authentication. The attack can be initiated remotely. The complexity of an...

Design/Logic Flaw

A vulnerability was found in Uniway Router 2.0. It has been declared as critical. This vulnerability affects unknown code of the component Administrative Web Interface. The manipulation leads to reliance on ip address for authentication. The attack can be initiated remotely. The complexity of an...

Authentication flaw

A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to initiate the attack remotely. The...

CVE-2023-7211 Uniway Router Administrative Web Interface reliance on ip address for authentication

A vulnerability was found in Uniway Router 2.0. It has been declared as critical. This vulnerability affects unknown code of the component Administrative Web Interface. The manipulation leads to reliance on ip address for authentication. The attack can be initiated remotely. The complexity of an...

CVE-2023-7211

CVE-2023-7211 affects Uniway Router 2.0, specifically the Administrative Web Interface. The vulnerability arises from unknown code in that component, causing authentication to rely on the client’s IP address. The issue enables remote exploitation with high impact across confidentiality, integrity...

CVE-2023-7210 OneNav API improper authentication

A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to initiate the attack remotely. The...

CVE-2023-7210 OneNav API improper authentication

A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to initiate the attack remotely. The...

CVE-2023-7210 OneNav API improper authentication

A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to initiate the attack remotely. The...

CVE-2024-0271

A vulnerability has been found in Kashipara Food Management System up to 1.0 and classified as critical. This vulnerability affects unknown code of the file addmaterialedit.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2023-7209

A vulnerability was found in Uniway Router up to 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boaform/devicereset.cgi of the component Device Reset Handler. The manipulation leads to denial of service. The attack may be launched remotely. T...

CVE-2023-7209

A vulnerability was found in Uniway Router up to 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boaform/devicereset.cgi of the component Device Reset Handler. The manipulation leads to denial of service. The attack may be launched remotely. T...