PT-2024-20846 · Unknown · Agro-School Management System

Name of the Vulnerable Software and Affected Versions: Agro-School Management System version 1.0 Description: The issue allows attackers to run arbitrary code via the Login page. This is due to a SQL Injection vulnerability. Recommendations: For Agro-School Management System version 1.0, consider...

Exam Form Submission Cross-Site Scripting Vulnerability

Code-Projects Exam Form Submission is an open source exam form from Code-Projects. A cross-site scripting vulnerability exists in Exam Form Submission version 1.0 that originates from allowing an attacker to execute arbitrary code via Subject Name and Subject Code...

SourceCodester My Food Recipe Cross-Site Scripting Vulnerability

SourceCodester My Food Recipe is a recipe sharing web application. A cross-site scripting vulnerability exists in SourceCodester My Food Recipe version v.1.0, which originates from a vulnerability that allows a local attacker to execute arbitrary code via the Recipe Name, Procedure, ingredients...

Secret-Coder-PHP-Project Security Vulnerability

Secret-Coder-PHP-Project is a PHP-based project. A security vulnerability exists in version 1.0 of Secret-Coder-PHP-Project that stems from the inclusion of sensitive information in the code...

Ecommerce-Website SQL Injection Vulnerability

Ecommerce-Website is a complete e-commerce website with an administration panel built using PHP and MySql. A SQL injection vulnerability exists in Ecommerce-Website version 1.0, which stems from the parameter catid/brandid/keyword in the file action.php that can lead to SQL injection...

Automated-Mess-Management-System Access Control Error Vulnerability

Automated-Mess-Management-System is an automated measurement management system by Boyiddhanath Roy Personal Developer. An Access Control Error vulnerability exists in Automated-Mess-Management-System version 1.0, which stems from /admin/index.php in the component Setting Handler containing unknow...

Automated-Mess-Management-System SQL Injection Vulnerability

Automated-Mess-Management-System is an automated measurement management system by Boyiddhanath Roy Personal Developer. A SQL injection vulnerability exists in Automated-Mess-Management-System version 1.0, which stems from the fact that incorrect manipulation of the parameter date can lead to SQL...

PHP MySQL User Signup Login System SQL Injection Vulnerability

The PHP MySQL User Signup Login System is a login and registration form using HTML, PHP and MySQL. A SQL injection vulnerability exists in version 1.0 of the PHP MySQL User Signup Login System, which originates from an SQL injection vulnerability in the email parameter of the /login.php file...

Online-Book-Store-Website Security Vulnerability

Online-Book-Store-Website is an online bookstore website. A security vulnerability exists in Online-Book-Store-Website version 1.0, which is caused by a business logic error in the productprice parameter of the /shop.php file...

PT-2024-19578 · Unknown · Boyiddha Automated-Mess-Management-System

Name of the Vulnerable Software and Affected Versions: boyiddha Automated-Mess-Management-System version 1.0 Description: A critical issue affects the processing of the file /index.php of the component Login Page. The manipulation of the useremail argument leads to sql injection. The attack may b...

PT-2024-19580 · Unknown · Boyiddha Automated-Mess-Management-System

Name of the Vulnerable Software and Affected Versions: boyiddha Automated-Mess-Management-System version 1.0 Description: A critical vulnerability has been found in the boyiddha Automated-Mess-Management-System. The issue is related to an unknown function of the file /member/view.php, where the...

PT-2024-18915 · Sourcecodester · Sourcecodester Insurance Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Insurance Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown processing. The manipulation of the page argument leads to file inclusion. The attack may be initiated...

CVE-2024-27746

SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the index.php component...

Petrol Pump Management Software SQL Injection Vulnerability

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A SQL injection vulnerability exists in Petrol Pump Management Software version 1.0, which originates from a SQL injection issue in the /admin/app/logincrud.php file...

Petrol Pump Management Software SQL Injection Vulnerability

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. Petrol Pump Management Software version v.1.0 suffers from a SQL injection vulnerability that originates from allowing an attacker to execute arbitrary code via the address parameter in the...

FAQ Management System Cross-Site Scripting Vulnerability

FAQ Management System is a FAQ management system by Remy Andrade, a personal developer. A cross-site scripting vulnerability exists in version 1.0 of the FAQ Management System, which stems from the parameter Frequently Asked Question in the component Update FAQ that causes cross-site scripting...

Petrol Pump Management Software Cross-Site Scripting Vulnerability

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A cross-site scripting vulnerability exists in Petrol Pump Management Software version v.1.0, which originates from a vulnerability that allows an attacker to execute arbitrary code with a...

FAQ Management System SQL Injection Vulnerability

FAQ Management System is a Frequently Asked Questions Management System by Remy Andrade Personal Developer. A SQL injection vulnerability exists in version 1.0 of the FAQ Management System, which stems from the parameter faq in the file /endpoint/delete-faq.php, which can lead to SQL injection...

Block Inserter for Dynamic Content SQL Injection Vulnerability

Block Inserter for Dynamic Content is a simple web application by oretnom23 Individual Developer for inserting one or more blocks into site pages with dynamic content. A SQL injection vulnerability exists in Block Inserter for Dynamic Content version 1.0, which stems from an SQL injection issue i...

Web-Based Student Clearance System SQL Injection Vulnerability

Web-Based Student Clearance System is a web-based student clearance system by the individual developer Ndueso Okorie. A SQL injection vulnerability exists in Web-Based Student Clearance System version 1.0, which stems from an incorrect manipulation of the parameter txtpassword that can lead to sq...