PHPGurukul Boat Booking System SQL注入漏洞

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul Boat Booking System version 1.0, which originates in the /admin/edit-subadmin.php page of the Edit Subdomain Details Page component, where sadminusername/fullname/...

PT-2024-16110 · Code Projects · Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A security issue has been found in the Manage Supplier Page component, specifically in the file /manage supplier.php. The manipulation of the address argument leads to cross-si...

PT-2024-16067 · Unknown · Phpgurukul Boat Booking System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Boat Booking System version 1.0 Description: A critical issue was found in the PHPGurukul Boat Booking System, affecting some unknown functionality of the file status.php of the component Check Booking Status Page. The manipulation...

PT-2024-16076 · Unknown · Sourcecodester Sentiment Based Movie Rating System

Name of the Vulnerable Software and Affected Versions: SourceCodester Sentiment Based Movie Rating System version 1.0 Description: A critical issue has been found, allowing for SQL injection through the manipulation of the id argument in an unknown function of the file /msrps/movie details.php...

PT-2024-16055 · Code Projects · Code-Projects Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A critical issue has been identified, affecting unknown code in the file /manage invoice.php. The manipulation of the invoice number argument leads to SQL injection. This issue...

PHPGurukul Boat Booking System SQL注入漏洞

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Boat Booking System, which originates from an SQL injection vulnerability contained in the nopeople parameter in the book-boat.php?bid=1 page of the Book a...

WordPress plugin Mitm Bug Tracker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-15981 · Code Projects · Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A critical issue has been found in the Pharmacy Management System. This issue affects the file /php/manage supplier.php?action=search, where the manipulation of the text argume...

PT-2024-15983 · Code Projects · Code-Projects Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A critical issue has been found in the processing of the file /php/manage medicine stock.php, where the manipulation of the argument name/packing/generic name/suppliers name...

dingfanzu 安全漏洞

dingfanzu is a php-based takeaway ordering website by the individual developer gk2007. A security vulnerability exists in dingfanzu version 1.0, which is caused by a cross-site request forgery vulnerability in the addPro parameter of the component doAdminAction.php. A remote attacker can exploit...

CVE-2024-48714

In TP-Link TL-WDR7660 v1.0, the guestRuleJsonToBin function handles the parameter string name without checking it, which can lead to stack overflow vulnerabilities...

WordPress WordPress Video plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin WordPress Video versions = 1.0...

TaskMatic 安全漏洞

TaskMatic is an automation assistant from TaskMatic. TaskMatic version 1.0 suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...

PT-2024-33237 · Taskmatic · Taskmatic

Name of the Vulnerable Software and Affected Versions: taskmatic version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the admin id parameter of the "/update-employee.php" API endpoint. Recommendations: For taskmatic version 1.0, consider disabling the...

PT-2024-39858 · Unknown · Codezips Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: Codezips Pharmacy Management System version 1.0 Description: A critical issue has been found in the processing of the file product/register.php, where the manipulation of the category argument leads to SQL injection. The attack may be initiat...

PT-2024-39844 · Unknown · Code-Projects Blood Bank System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank System version 1.0 Description: A critical issue was found in the code-projects Blood Bank System, affecting an unknown function of the file register.php. The manipulation of the user argument leads to SQL injection. ...

code-projects Blood Bank System SQL注入漏洞

Code-Projects Blood Bank System is a Code-Projects open source blood bank management system. A SQL injection vulnerability exists in code-projects Blood Bank System version 1.0, which originates from an SQL injection issue in the name parameter of the /update.php page...

PT-2024-39862 · Unknown · Code-Projects Blood Bank System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /update.php. The manipulation of the name argument leads to SQL injection. It is possible to initiate the attack...

PT-2024-31950 · Unknown · Itsourcecode Placement Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Placement Management System version 1.0 Description: The issue is related to Cross Site Scripting XSS via the Full Name field in registration.php. This allows for potential malicious script injection. No information is provided...

itsourcecode Online Discussion Forum Project 安全漏洞

itsourcecode Online Discussion Forum Project is an online forum project of itsourcecode open source. A security vulnerability exists in itsourcecode Online Discussion Forum Project version v.1.0, which stems from a file upload vulnerability that allows a remote attacker to execute arbitrary code...