CVE-2024-12231

CodeZips Project Management System 1.0 contains an SQL injection vulnerability in /index.php, triggered by manipulating the email parameter. Root cause is improper input handling, enabling remote exploitation with high impact on confidentiality, integrity, and availability. Public exploit informa...

CVE-2024-12926

CVE-2024-12926 affects Codezips Project Management System version 1.0. The vulnerability is in /pages/forms/advanced.php, where manipulation of the name parameter leads to SQL injection. It can be exploited remotely and exploit details have been disclosed publicly. Practical impact includes poten...