Employee And Visitor Gate Pass Logging System 1.0 SQL Injection

Exploit Title: Employee and Visitor Gate Pass Logging System - SQLi Authentication Bypass Date: 29.05.2024 Exploit Author: Furkan Eren Tetik Vendor Homepage: https://www.sourcecodester.com/php/15026/employee-and-visitor-gate-pass-logging-system-php-source-code.html Software Link:...

CVE-2024-4355

The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the stopbadbotsgetajaxdata function in all versions up to, and including, 10.23. This makes it possible for...

CVE-2024-4355 Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection <= 10.23 - Missing Authorization to Information Expsoure

The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the stopbadbotsgetajaxdata function in all versions up to, and including, 10.23. This makes it possible for...

PT-2024-30599 · WordPress · Block Bad Bots/Stop Bad Bots Crawlers/Spiders/Anti Spam Protection

Name of the Vulnerable Software and Affected Versions: The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin for WordPress versions up to, and including, 10.24 Description: The issue is related to unauthorized access of data due to a missing capability check on...

CVE-2024-4921

A vulnerability classified as critical has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is an unknown function of the file /employeegatepass/classes/Users.php?f=ssave. The manipulation of the argument img leads to unrestricted upload. It is possible to...

CVE-2024-4921

CVE-2024-4921 affects the SourceCodester Employee and Visitor Gate Pass Logging System 1.0. The vulnerability is in an unknown function of the file /employee_gatepass/classes/Users.php?f=ssave, where manipulation of the img parameter enables unrestricted upload. This can be exploited remotely, an...

Employee and Visitor Gate Pass Logging System Code Issue Vulnerability

Employee and Visitor Gate Pass Logging System is an employee and visitor pass logging system developed by Carlo Montero. A code issue exists in Employee and Visitor Gate Pass Logging System version 1.0 where an incorrect manipulation of the parameter img results in an unrestricted upload...

CVE-2024-4921: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. Affected is an unknown function of the file /employeegatepass/classes/Users.php?f=ssave. The manipulation of the argument img leads to unrestricted upload. It is possible to...

CVE-2024-34226

SQL injection vulnerability in /php-sqlite-vms/?page=managevisitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters...

CVE-2024-34226

SQL injection vulnerability in /php-sqlite-vms/?page=managevisitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters...

CVE-2024-34226: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in /php-sqlite-vms/?page=managevisitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters...

Visitor Management System 安全漏洞

Visitor Management System is a visitor management system. A security vulnerability exists in SourceCodester Visitor Management System version 1.0, which originates from a SQL injection vulnerability that allows an attacker to execute arbitrary SQL commands via the id parameter...

CVE-2024-34226

SQL injection vulnerability in /php-sqlite-vms/?page=managevisitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters...

CVE-2024-34226

SQL injection vulnerability in /php-sqlite-vms/?page=managevisitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters...

PT-2024-25756 · Sourcecodester · Sourcecodester Stock Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Visitor Management System version 1.0 Description: The issue allows attackers to execute arbitrary SQL commands, potentially leading to data exfiltration. This can be exploited remotely via the id parameter in the...

CVE-2024-31937

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visitor Analytics TWIPLA Visitor Analytics IO allows Stored XSS.This issue affects TWIPLA Visitor Analytics IO: from n/a through 1.2.0...

CVE-2024-31937 WordPress TWIPLA (Visitor Analytics IO) plugin <= 1.2.0 - Cross-Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visitor Analytics TWIPLA Visitor Analytics IO allows Stored XSS.This issue affects TWIPLA Visitor Analytics IO: from n/a through 1.2.0...

CVE-2024-31937

CVE-2024-31937 affects the TWIPLA (Visitor Analytics IO) WordPress plugin. The connected Wordfence entry documents a Stored Cross-Site Scripting vulnerability in TWIPLA, described as Improper Neutralization of Input During Web Page Generation. Affected version range is from unspecified inception ...

CVE-2024-31937: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Visitor Analytics TWIPLA Visitor Analytics IO allows Stored XSS.This issue affects TWIPLA Visitor Analytics IO: from n/a through 1.2.0...

PT-2024-24301 · Twipla · Twipla

Name of the Vulnerable Software and Affected Versions: TWIPLA Visitor Analytics IO versions 1.2.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...