Tailoring Management System SQL注入漏洞

Tailoring Management System is itsourcecode open source a tailoring management system. A SQL injection vulnerability exists in Tailoring Management System version 1.0, which stems from the parameter title in the file /inccatadd.php that can lead to SQL injection...

PT-2024-39096 · Sourcecodester · Sourcecodester Online Food Menu

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Menu version 1.0 Description: A critical issue has been found in the processing of the file /endpoint/delete-menu.php. The manipulation of the argument menu leads to SQL injection. The attack may be initiated...

drug 安全漏洞

drug is a drugstore sales management system from the individual developer deathbreak. A security vulnerability exists in drug version 1.0, which stems from a cross-site scripting XSS vulnerability in the component eanManager.java, which allows an attacker to execute arbitrary web script or HTML b...

Sourcecodester Simple Forum Website 安全漏洞

SourceCodester Simple Forum Website is a simple forum website from SourceCodester, Inc. A security vulnerability exists in Sourcecodester Simple Forum Website v1.0, which originates from a SQL injection vulnerability in /php-sqlite-forum/?page=manageuser&id=...

PHPGurukul Job Portal SQL注入漏洞

PHPGurukul Job Portal is a PHP-based job search website system from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul Job Portal version 1.0, which originates from the id parameter in /jobportal/admin/employee/index.php...

camera-pi 安全漏洞

camera-pi is a camera module by Michael Horne Personal Developer. A security vulnerability exists in camera-pi version 1.0, which stems from the mishandling of user input passed to the position GET parameter in the tilt.php script, which could allow an attacker to execute arbitrary commands by...

PT-2024-31262 · Unknown · Online Complaint Site

Name of the Vulnerable Software and Affected Versions: Online Complaint Site version 1.0 Description: The issue allows a remote attacker to escalate privileges via the username and password parameters in the "/admin.index.php" API endpoint. Recommendations: For Online Complaint Site version 1.0,...

Computer Laboratory Management System SQL注入漏洞

Computer Laboratory Management System is an open source computer laboratory management system from SourceCodester. A SQL injection vulnerability exists in Computer Laboratory Management System version 1.0, which originates from a SQL injection vulnerability in the id parameter of the...

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. Kashipara Music Management System v1.0 has a cross-site request forgery vulnerability, which originates from the /music/ajax.php?action=saveuser page does not adequately verify whether the request is from a trusted use...

Insurance Management System 跨站脚本漏洞

Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A cross-site scripting vulnerability exists in Insurance Management System version 1.0, which stems from an incorrect manipulation of the parameter AGENT ID that results in...

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system by the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System version 1.0, which stems from the manipulation of the parameter CLIENT ID in the file addClient.php that can lead to...

PT-2024-38877 · Unknown · Code-Projects Online Quiz Site

Name of the Vulnerable Software and Affected Versions: code-projects Online Quiz Site version 1.0 Description: A critical issue affects the processing of the file index.php, where the manipulation of the loginid argument leads to SQL injection. The attack can be initiated remotely. The exploit ha...

Kashipara Music Management System 安全漏洞

Kashipara Music Management System is a music management system from Kashipara. A cross-site request forgery vulnerability exists in Kashipara Music Management System v1.0, which can be exploited by an attacker to spoof a malicious request and trick a victim into clicking on it to perform a...

PT-2024-38840 · Sourcecodester · Sourcecodester Qr Code Bookmark System

Name of the Vulnerable Software and Affected Versions: SourceCodester QR Code Bookmark System version 1.0 Description: A vulnerability was found in the system, affecting some unknown processing of the file /endpoint/delete-bookmark.php. The manipulation of the bookmark argument leads to cross-sit...

CVE-2024-42776

Kashipara Hotel Management System v1.0 is vulnerable to Incorrect Access Control via /admin/users.php...

Kashipara Hotel Management System 安全漏洞

Kashipara Hotel Management System is a hotel management system from Kashipara. An access control error vulnerability exists in Kashipara Hotel Management System v1.0 that can be exploited by an attacker to cause unauthorized operation...

Kashipara Hotel Management System 安全漏洞

Kashipara Hotel Management System is a hotel management system from Kashipara. A cross-site request forgery vulnerability exists in Kashipara Hotel Management System v1.0, which can be exploited by an attacker to forge a malicious request and trick a victim into clicking on it to perform a...

Payroll Management System SQL注入漏洞

Payroll Management System is itsourcecode open source payroll management system. Payroll Management System version 1.0 has a SQL injection vulnerability , the vulnerability stems from the login.php file username parameter has a SQL injection vulnerability...

CVE-2024-42779

An Unrestricted file upload vulnerability was found in "/music/ajax.php?action=savemusic" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a crafted PHP file...

PT-2024-30154 · Unknown · Kashipara Music Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Music Management System version 1.0 Description: A SQL injection issue in the "/music/ajax.php?action=find music" endpoint allows an attacker to execute arbitrary SQL commands via the search parameter. This enables the attacker to...