CVE-2024-12232

CVE-2024-12232 affects Code-Projects Simple CRUD Functionality 1.0. The vulnerability occurs in an unknown code path of /index.php, where manipulation of the parameters newtitle and newdescr leads to cross-site scripting (XSS) . It is described as exploitable remotely with the exploit publicly di...

CVE-2023-48078

CVE-2023-48078 affects Simple CRUD Functionality v1.0. The vulnerability is an SQL injection in the add.php handler, exploitable via the title parameter, allowing arbitrary SQL execution. The reported CVSSv3.1 score is 9.8 (CRITICAL) with network attack vector, no authentication, and all CIA impa...