Information disclosure

A vulnerability was found in Uniway Router up to 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boaform/devicereset.cgi of the component Device Reset Handler. The manipulation leads to denial of service. The attack may be launched remotely. T...

CVE-2023-7209

Summary (CVE-2023-7209): Uniway Router

CVE-2024-0271 Kashipara Food Management System addmaterial_edit.php sql injection

A vulnerability has been found in Kashipara Food Management System up to 1.0 and classified as critical. This vulnerability affects unknown code of the file addmaterialedit.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-0271 Kashipara Food Management System addmaterial_edit.php sql injection

A vulnerability has been found in Kashipara Food Management System up to 1.0 and classified as critical. This vulnerability affects unknown code of the file addmaterialedit.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-0268

A vulnerability, which was classified as critical, has been found in Kashipara Hospital Management System up to 1.0. Affected by this issue is some unknown functionality of the file registration.php. The manipulation of the argument name/email/pass/gender/age/city leads to sql injection. The atta...

CVE-2024-0270

A vulnerability, which was classified as critical, was found in Kashipara Food Management System up to 1.0. This affects an unknown part of the file itemlistsubmit.php. The manipulation of the argument itemname leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

Sql injection

A vulnerability, which was classified as critical, was found in Kashipara Food Management System up to 1.0. This affects an unknown part of the file itemlistsubmit.php. The manipulation of the argument itemname leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

CVE-2024-0270 Kashipara Food Management System item_list_submit.php sql injection

A vulnerability, which was classified as critical, was found in Kashipara Food Management System up to 1.0. This affects an unknown part of the file itemlistsubmit.php. The manipulation of the argument itemname leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

CVE-2024-0270 Kashipara Food Management System item_list_submit.php sql injection

A vulnerability, which was classified as critical, was found in Kashipara Food Management System up to 1.0. This affects an unknown part of the file itemlistsubmit.php. The manipulation of the argument itemname leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

CVE-2024-0270

CVE-2024-0270 affects Kashipara Food Management System up to version 1.0. The vulnerability is an SQL injection in the item_list_submit.php file driven by unsafely handled item_name input, allowing remote exploitation. Multiple sources corroborate the existence of this flaw and the public disclos...

CVE-2024-0268

CVE-2024-0268 affects Kashipara Hospital Management System (versions up to 1.0). The vulnerability is in the registration.php functionality where manipulating arguments name, email, pass, gender, age, or city enables SQL injection. Reported to be exploitable remotely with public disclosure. No pa...

CVE-2024-0268 Kashipara Hospital Management System registration.php sql injection

A vulnerability, which was classified as critical, has been found in Kashipara Hospital Management System up to 1.0. Affected by this issue is some unknown functionality of the file registration.php. The manipulation of the argument name/email/pass/gender/age/city leads to sql injection. The atta...

CVE-2023-7208

A vulnerability classified as critical was found in Totolink X2000RV2 2.0.0-B20230727.10434. This vulnerability affects the function formTmultiAP of the file /bin/boa. The manipulation leads to buffer overflow. VDB-249742 is the identifier assigned to this vulnerability. NOTE: The vendor was...

CVE-2023-7208 Totolink X2000R_V2 boa formTmultiAP buffer overflow

A vulnerability classified as critical was found in Totolink X2000RV2 2.0.0-B20230727.10434. This vulnerability affects the function formTmultiAP of the file /bin/boa. The manipulation leads to buffer overflow. VDB-249742 is the identifier assigned to this vulnerability. NOTE: The vendor was...

CVE-2023-7208 Totolink X2000R_V2 boa formTmultiAP buffer overflow

A vulnerability classified as critical was found in Totolink X2000RV2 2.0.0-B20230727.10434. This vulnerability affects the function formTmultiAP of the file /bin/boa. The manipulation leads to buffer overflow. VDB-249742 is the identifier assigned to this vulnerability. NOTE: The vendor was...

CVE-2023-7208

Totolink X2000R_V2 2.0.0-B20230727.10434- is affected. The vulnerability lies in the function formTmultiAP in /bin/boa, where improper input length validation leads to a buffer overflow. This can enable remote attackers to execute arbitrary code or cause a denial of service. Impact is described a...

CVE-2024-0266

A vulnerability classified as problematic has been found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the component User Registration. The manipulation of the argument First Name leads to cross site scripting. It is possible to launch the attack...

Cross site scripting

A vulnerability classified as problematic has been found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the component User Registration. The manipulation of the argument First Name leads to cross site scripting. It is possible to launch the attack...

Sql injection

A vulnerability classified as critical was found in Kashipara Hospital Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component Parameter Handler. The manipulation of the argument email/password leads to sql injection. The atta...

CVE-2024-0267 Kashipara Hospital Management System Parameter login.php sql injection

A vulnerability classified as critical was found in Kashipara Hospital Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component Parameter Handler. The manipulation of the argument email/password leads to sql injection. The atta...