5.3

CVSS4.0

CVE-2024-9327 - code-projects Blood Bank System forgot.php sql injection

A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forgot.php. The manipulation of the argument useremail leads to sql injection. The attack can be initiated remotely. The exploit has been disclose…

📅 Published: Sept. 29, 2024, 11 a.m. 🔄 Last Modified: Oct. 2, 2024, 12:57 p.m.

6.9

CVSS4.0

CVE-2024-9326 - PHPGurukul Online Shopping Portal Admin Panel index.php sql injection

A vulnerability classified as critical was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /shopping/admin/index.php of the component Admin Panel. The manipulation of the argument username leads to sql injection. The attack can be initiated remote…

📅 Published: Sept. 29, 2024, 8 a.m. 🔄 Last Modified: Oct. 2, 2024, 1:33 p.m.

8.5

CVSS4.0

CVE-2024-9325 - Intelbras InControl incontrol-service-watchdog.exe unquoted search path

A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56. This affects an unknown part of the file C:\Program Files (x86)\Intelbras\Incontrol Cliente\incontrol_webcam\incontrol-service-watchdog.exe. The manipulation leads to unquoted search path. It is possible to …

📅 Published: Sept. 29, 2024, 7:31 a.m. 🔄 Last Modified: Nov. 4, 2024, 7:15 p.m.

5.3

CVSS4.0

CVE-2024-9324 - Intelbras InControl Relatório de Operadores Page operador code injection

A vulnerability was found in Intelbras InControl up to 2.21.57. It has been rated as critical. Affected by this issue is some unknown functionality of the file /v1/operador/ of the component Relatório de Operadores Page. The manipulation of the argument fields leads to code injection. The attack ma…

📅 Published: Sept. 29, 2024, 7 a.m. 🔄 Last Modified: Nov. 4, 2024, 7:15 p.m.

5.3

CVSS4.0

CVE-2024-9323 - SourceCodester Inventory Management System add_staff.php cross site scripting

A vulnerability was found in SourceCodester Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /app/action/add_staff.php. The manipulation leads to cross site scripting. The attack can be launched remotely. Th…

📅 Published: Sept. 29, 2024, 6:31 a.m. 🔄 Last Modified: Oct. 1, 2024, 12:55 p.m.

5.3

CVSS4.0

CVE-2024-9322 - code-projects Supply Chain Management edit_manufacturer.php sql injection

A vulnerability was found in code-projects Supply Chain Management 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/edit_manufacturer.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit…

📅 Published: Sept. 29, 2024, 3 a.m. 🔄 Last Modified: Oct. 2, 2024, 1:32 p.m.

6.9

CVSS4.0

CVE-2024-9321 - SourceCodester Online Railway Reservation System view_details.php access control

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/inquiries/view_details.php. The manipulation of the argument id leads to improper access controls. The attack may be initiated …

📅 Published: Sept. 29, 2024, 12:31 a.m. 🔄 Last Modified: Oct. 1, 2024, 1:28 p.m.

5.3

CVSS4.0

CVE-2024-9320 - SourceCodester Online Timesheet App Add Timesheet Form add-timesheet.php cross site scripting

A vulnerability has been found in SourceCodester Online Timesheet App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /endpoint/add-timesheet.php of the component Add Timesheet Form. The manipulation of the argument day/task leads to cross site scripting. The …

📅 Published: Sept. 29, 2024, midnight 🔄 Last Modified: Oct. 1, 2024, 1:28 p.m.

5.3

CVSS4.0

CVE-2024-9319 - SourceCodester Online Timesheet App delete-timesheet.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Online Timesheet App 1.0. This affects an unknown part of the file /endpoint/delete-timesheet.php. The manipulation of the argument timesheet leads to sql injection. It is possible to initiate the attack remotely. The ex…

📅 Published: Sept. 28, 2024, 11:31 p.m. 🔄 Last Modified: Oct. 1, 2024, 1:29 p.m.

5.3

CVSS4.0

CVE-2024-9318 - SourceCodester Advocate Office Management System activate.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Advocate Office Management System 1.0. Affected by this issue is some unknown functionality of the file /control/activate.php. The manipulation of the argument id leads to sql injection. The attack may be launched r…

📅 Published: Sept. 28, 2024, 11 p.m. 🔄 Last Modified: Oct. 1, 2024, 1:31 p.m.
Total resulsts: 349182
Page 8441 of 34,919
« previous page » next page
Filters