CVE-2024-1820

CVE-2024-1820 affects code-projects Crime Reporting System 1.0, specifically inchargelogin.php. The vulnerability arises from unsafely handling the email and password parameters, enabling SQL injection. It is exploitable remotely and an exploit has been disclosed publicly. Multiple sources (NVD, ...

CVE-2024-1821

Affected product: code-projects Crime Reporting System 1.0. Vulnerability: SQL injection in processing of police_add.php caused by manipulating parameters police_name, police_id, police_spec, or password. Root cause (as described): improper handling/concatenation of user-supplied input leading to...