Inventory Management System SQL Injection Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which stems from an incorrect manipulation of the columns parameter that can lead to sql injection...

SUP Online Shopping Security Breach

SUP Online Shopping is an online shopping website. A security vulnerability exists in SUP Online Shopping version v.1.0, which stems from a cross-site scripting XSS vulnerability. The vulnerability can be exploited by an attacker to execute arbitrary code via parameters such as Name in the Regist...

CVE-2023-48078

SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter...

Malicious code in discord-web-stream.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34fa39c7559a1834d28c5b1e0b3470965c15470b60f2f9c1a196a823e394a49f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Simple CRUD Functionality Security Vulnerability

Simple CRUD Functionality is a web application. A security vulnerability exists in code-projects Simple CRUD Functionality v1.0, which stems from an SQL injection vulnerability that allows attackers to run arbitrary SQL commands via the title parameter...

Exploit for Cross-Site Request Forgery (CSRF) in Remyandrade Sticky_Notes_App

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1...

Online Matrimonial Project SQL Injection Vulnerability

Online Matrimonial Project is an online matrimonial program. A SQL injection vulnerability exists in Online Matrimonial Project v1.0 where certain parameters are not validated or escaped before they are used in a stitched SQL statement...

Online Job Portal SQL Injection Vulnerability

Online Job Portal is an online job portal for janobe individual developers. A SQL injection vulnerability exists in Online Job Portal v1.0 where certain parameters are not validated or escaped before they are used in a stitched SQL statement...

CVE-2023-45345

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

Simple Student Information System SQL Injection Vulnerability

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. A SQL injection vulnerability exists in Simple Student Information System version 1.0, which ste...

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the id parameter on the routers/add-ticket.php page...

Simple Student Information System Cross-Site Scripting Vulnerability

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. A cross-site scripting vulnerability exists in Campcodes Simple Student Information System versi...

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system developed by Carlo Montero. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the price parameter on the routers/menu-router.php page, resulting in a SQL injection...

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which is caused by insufficient filtering of the role parameter on the routers/user-router.php page, resulting in a SQL...

Simple Student Information System SQL Injection Vulnerability

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. A SQL injection vulnerability exists in Simple Student Information System version 1.0, which ste...

PT-2023-29455 · Unknown · Online Examination System

Name of the Vulnerable Software and Affected Versions: Online Examination System version 1.0 Description: The issue concerns multiple Open Redirect vulnerabilities. Specifically, the q parameter of the "feed.php" resource is vulnerable, allowing an attacker to redirect a victim user to an arbitra...

Best Courier Management System Cross-Site Scripting Vulnerability

Best Courier Management System is a courier management system by Mayuri K. Individual developer. A security vulnerability exists in Best Courier Management System v1.0, which stems from a cross-site scripting XSS vulnerability in the change username field...

PT-2023-29213 · Unknown · Online Art Gallery

Name of the Vulnerable Software and Affected Versions: Online Art Gallery version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the add3 parameter of the header.php resource does not validate the characters received, and they are sent...

PT-2023-28957 · Unknown · Online Art Gallery

Name of the Vulnerable Software and Affected Versions: Online Art Gallery version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the fnm parameter of the header.php resource does not validate the characters received, and they are sent...

Projectworlds Online Art gallery project SQL Injection Vulnerability

Projectworlds Online Art gallery project is an online art gallery project by Projectworlds India. A SQL injection vulnerability exists in Projectworlds Online Art gallery project v1.0, which stems from the lnm parameter in header.php that does not validate incoming characters and sends them...