CVE-2024-10561

The CVE-2024-10561 entry concerns Codezips Pet Shop Management System 1.0. The vulnerability is a SQL injection in the birdsupdate.php file triggered by manipulating the id parameter, with remote exploitation claimed. Multiple sources corroborate a critical impact (high confidentiality, integrity...

CVE-2024-10556

CVE-2024-10556 : Codezips Pet Shop Management System 1.0 contains a SQL injection in birdsadd.php via the id parameter. The issue arises from an unsafe handling of the argument, enabling remote exploitation. Multiple connected sources reiterate the vulnerability with a critical/high severity and ...

CVE-2024-10752

CVE-2024-10752 affects Codezips Pet Shop Management System 1.0. A SQL injection vulnerability exists in the unknown portion of /productsadd.php triggered by manipulating the id/name arguments. Exploitation is remote, with no authenticated user required per the descriptions. The CVE is corroborate...

CVE-2024-10427

CVE-2024-10427 affects Codezips Pet Shop Management System 1.0. The vulnerability is a SQL injection in the /deleteanimal.php endpoint triggered by manipulating the t1 parameter (initially thought to be refno). It can be exploited remotely and has been publicly disclosed. Connected sources consis...

CVE-2024-10426

CVE-2024-10426 affects Codezips Pet Shop Management System 1.0. The vulnerability exists in the /animalsadd.php file where the parameter id is manipulated to perform an SQL injection. Remote exploitation is possible, and public exploits have been disclosed. Initial advisory mentioned a possible p...

CVE-2024-10430

Codezips Pet Shop Management System 1.0 contains a SQL injection vulnerability in /animalsupdate.php triggered by tampering with the id parameter. Root cause: improper handling of the id value enables adversaries to manipulate a database query remotely. Impact, as reflected by CVSS metrics, inclu...

CVE-2024-10431

Summary of CVE-2024-10431 : Affects Codezips Pet Shop Management System 1.0. The vulnerability exists in the /deletebird.php file, specifically the t1 parameter, whose manipulation enables an SQL injection. It can be exploited remotely and, according to sources, the exploit has been disclosed pub...