Simple Customer Relationship Management SQL注入漏洞

Simple Customer Relationship Management Simple CRM is a simple customer relationship management system by Carlo Montero, a personal developer. A security vulnerability exists in Simple Customer Relationship Management System v1.0, which stems from a SQL injection vulnerability via the parameter...

Art Gallery Management System 跨站脚本漏洞

Art Gallery Management System is an art gallery management system by the individual developer Anuj Kumar. A security vulnerability exists in Art Gallery Management System Project v1.0, which stems from a stored cross-site scripting XSS vulnerability that can be exploited by an attacker to execute...

MV iDigital Clinic Enterprise 安全漏洞

MV iDigital Clinic Enterprise is software used for healthcare related services. A security vulnerability exists in MV iDigital Clinic Enterprise iDCE version 1.0 that stems from storing passwords in plaintext...

Sales Tracker Management System 跨站请求伪造漏洞

Sales Tracker Management System is a sales tracker management system by Carlo Montero Personal Developer. A cross-site request forgery vulnerability exists in SourceCodester Sales Tracker Management System version 1.0. An attacker could exploit this vulnerability to conduct a cross-site request...

PT-2023-16675 · Sourcecodester · Moosikay E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester Moosikay E-Commerce System version 1.0 Description: A critical issue affects the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the username argument leads to sql injection. The attack may...

Online Student Admission System SQL注入漏洞

Online Student Admission System is an online student admission system. It is used to computerize all pre- and post-admission activities of an institution. A security vulnerability exists in Online Student Admission System version 1.0, which was discovered to contain an SQL injection vulnerability...

Music Gallery Site 访问控制错误漏洞

Music Gallery Site is a music gallery site by the individual developer Carlo Montero. An Access Control Error vulnerability exists in version 1.0 of SourceCodester Music Gallery Site, which stems from a problem with the file Users.php that can lead to incorrect access control...

Music Gallery Site SQL注入漏洞

Music Gallery Site is a music gallery site by the individual developer Carlo Montero. A SQL injection vulnerability exists in Music Gallery Site version 1.0, which stems from an incorrect manipulation of the parameter cid resulting in sql injection...

PT-2023-6681 · Sourcecodester · Sourcecodester Auto Dealer Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Auto Dealer Management System version 1.0 Description: The issue is related to improper access controls in the /adms/classes/Users.php file of the SourceCodester Auto Dealer Management System. This can be exploited by a remote...

PT-2023-16618 · Unknown · Code-Projects Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Pharmacy Management System version 1.0 Description: A critical issue has been found in the Avatar Image Handler component of the file add.php, leading to unrestricted upload. The attack can be initiated remotely. The issue affect...

Simple Food Ordering System 跨站脚本漏洞

Simple Food Ordering System is a simple food ordering system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in Simple Food Ordering System version 1.0, which stems from cross-site scripting due to misuse of the parameter order...

Employee Task Management System SQL注入漏洞

Employee Task Management System is an Employee Task Management System by Carlo Montero Personal Developer. An SQL injection vulnerability exists in Employee Task Management System version 1.0, which stems from an incorrect manipulation of the taskid parameter that can lead to sql injection...

Auto Dealer Management System SQL注入漏洞

Auto Dealer Management System is an automobile dealer management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Auto Dealer Management System version 1.0, which is caused by an incorrect manipulation of the parameter id that results in an sql injection...

Simple Task Managing System SQL注入漏洞

Simple Task Managing System is a simple task management system. A security vulnerability exists in Simple Task Managing System version 1.0, which is caused by an SQL injection in the username and password parameters of login.php, and can be exploited by an attacker to execute arbitrary code and...

FantasticLBP Hotels Server SQL注入漏洞

FantasticLBP Hotels Server is a backend management system for hotel reservation systems. A security vulnerability exists in FantasticLBP Hotels Server v1.0 that allows an attacker to execute arbitrary code via the username parameter...

Online Pizza Ordering System SQL注入漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in Online Pizza Ordering System version 1.0, which is caused by an incorrect manipulation of a parameter ID that results in an sql injection...

CVE-2023-0784

A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. Affected is an unknown function of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

Future-Depth Institutional Management Website 代码问题漏洞

Future-Depth Institutional Management Website is a user-friendly institutional website from the individual developers at Future-Depth that offers various types of courses for students. A security vulnerability exists in Future-Depth Institutional Management Website IMS version 1.0. An attacker...

Online Eyewear Shop SQL注入漏洞

Online Eyewear Shop is an online eyewear store by the personal developer Carlo Montero. A SQL injection vulnerability exists in Online Eyewear Shop version 1.0, which stems from an incorrect manipulation of the parameter cartid resulting in sql injection...

WordPress Plugin Vimeo Video Autoplay Automute 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...