1994 matches found
Block Inserter for Dynamic Content SQL Injection Vulnerability
Block Inserter for Dynamic Content is a simple web application by oretnom23 Individual Developer for inserting one or more blocks into site pages with dynamic content. A SQL injection vulnerability exists in Block Inserter for Dynamic Content version 1.0, which stems from an SQL injection issue i...
FAQ Management System SQL Injection Vulnerability
FAQ Management System is a Frequently Asked Questions Management System by Remy Andrade Personal Developer. A SQL injection vulnerability exists in version 1.0 of the FAQ Management System, which stems from the parameter faq in the file /endpoint/delete-faq.php, which can lead to SQL injection...
Petrol Pump Management Software SQL Injection Vulnerability
Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. Petrol Pump Management Software version v.1.0 suffers from a SQL injection vulnerability that originates from allowing an attacker to execute arbitrary code via the address parameter in the...
Petrol Pump Management Software Cross-Site Scripting Vulnerability
Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A cross-site scripting vulnerability exists in Petrol Pump Management Software version v.1.0, which originates from a vulnerability that allows an attacker to execute arbitrary code with a...
Web-Based Student Clearance System SQL Injection Vulnerability
Web-Based Student Clearance System is a web-based student clearance system by the individual developer Ndueso Okorie. A SQL injection vulnerability exists in Web-Based Student Clearance System version 1.0, which stems from an incorrect manipulation of the parameter txtpassword that can lead to sq...
Projectworlds Visitor Management System SQL Injection Vulnerability
Projectworlds Visitor Management System is a visitor access management system. It implements self-service functionality for visitors. A SQL injection vulnerability exists in Projectworlds Visitor Management System v.1.0 that could allow a remote attacker to escalate privileges via the name...
CVE-2024-25166
Cross Site Scripting vulnerability in 71CMS v.1.0.0 allows a remote attacker to execute arbitrary code via the uploadfile action parameter in the controller.php file...
Simple Stock System Security Vulnerability
Simple Stock System is a simple stock system by the individual developer Carmelo Garcia. A security vulnerability exists in version 1.0 of the Simple Stock System that stems from the system's susceptibility to SQL injection attacks...
71CMS Security Breach
71CMS is xiaocheng-keji open source a smart party building system. 71CMS v.1.0.0 version has a security vulnerability. Attackers use this vulnerability to execute arbitrary code via the uploadfile parameter in the controller.php file...
PT-2024-18426 · Unknown · Codeastro Membership Management System
Name of the Vulnerable Software and Affected Versions: CodeAstro Membership Management System version 1.0 Description: A critical issue has been found in the CodeAstro Membership Management System. The problem affects the /get membership amount.php file, where the manipulation of the...
PT-2024-18430 · Sourcecodester · Sourcecodester Web-Based Student Clearance System
Name of the Vulnerable Software and Affected Versions: SourceCodester Web-Based Student Clearance System version 1.0 Description: A critical issue has been found in the Edit User Profile Page of the SourceCodester Web-Based Student Clearance System, specifically in the file /admin/edit-admin.php...
PT-2024-20271 · Unknown · Code-Projects Computer Book Store
Name of the Vulnerable Software and Affected Versions: Code-projects Computer Book Store version 1.0 Description: The issue is related to SQL Injection via the PublisherID. This allows for potential unauthorized access to sensitive data. There is no information provided about the estimated number...
PT-2024-18384 · Sourcecodester · Sourcecodester Employee Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System version 1.0 Description: A critical issue has been found, affecting an unknown function of the file /psubmit.php. The manipulation of the argument pid with the input '+or+1%3d1%23 leads to SQL...
Library System SQL Injection Vulnerability
Library System is a library management system by the individual developer nurhodelta17. A SQL injection vulnerability exists in Library System version 1.0, which stems from the fact that incorrect manipulation of the parameters username and password can lead to SQL injection...
CodeAstro Simple Voting System Access Control Error Vulnerability
CodeAstro Simple Voting System is a simple voting system from CodeAstro. An Access Control Error vulnerability exists in CodeAstro Simple Voting System version 1.0, which stems from the file users.php that causes incorrect access control...
PT-2024-18349 · Sourcecodester · Sourcecodester Simple Student Attendance System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Attendance System version 1.0 Description: A vulnerability was found in the SourceCodester Simple Student Attendance System, which has been classified as problematic. This issue affects an unknown part of the fil...
Agro-School Management System security breach
Agro-School Management System is an agricultural school management system. A security vulnerability exists in Agro-School Management System version 1.0 that stems from improper access control...
PT-2024-18234 · Unknown · Keerti1924 Php-Mysql-User-Login-System
Name of the Vulnerable Software and Affected Versions: keerti1924 PHP-MYSQL-User-Login-System version 1.0 Description: A critical issue has been found, affecting an unknown functionality of the file /edit.php, leading to improper access controls. The attack can be launched remotely...
CVE-2024-25221
A cross-site scripting XSS vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note Section parameter at /TaskManager/Tasks.php...