Archive
12 May 2024
Vulnerabilities first published on this day (UTC), newest first.
18 results · Feed
-
Medium 6.3
Kashipara College Management System delete_user.php sql injection
A vulnerability, which was classified as critical, has been found in Kashipara College Management System 1.0. This issue affects some unknown processing of the file delete_user.php. The manipulation of the argument id leads to sql injection. The attack may be…
-
Medium 6.3
Kashipara College Management System each_extracurricula_activities.php sql injection
A vulnerability classified as critical was found in Kashipara College Management System 1.0. This vulnerability affects unknown code of the file each_extracurricula_activities.php. The manipulation of the argument id leads to sql injection. The attack can be …
-
Medium 6.3
Kashipara College Management System edit_faculty.php sql injection
A vulnerability classified as critical has been found in Kashipara College Management System 1.0. This affects an unknown part of the file edit_faculty.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remo…
-
Medium 6.3
Kashipara College Management System edit_user.php sql injection
A vulnerability was found in Kashipara College Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file edit_user.php. The manipulation of the argument id leads to sql injection. The attack may be …
-
Medium 6.3
Kashipara College Management System submit_admin.php sql injection
A vulnerability was found in Kashipara College Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file submit_admin.php. The manipulation of the argument phone leads to sql injection. The…
-
Medium 6.3
Kashipara College Management System submit_extracurricular_activity.php sql injection
A vulnerability was found in Kashipara College Management System 1.0. It has been classified as critical. Affected is an unknown function of the file submit_extracurricular_activity.php. The manipulation of the argument activity_datetime leads to sql injectio…
-
Medium 6.3
Kashipara College Management System submit_new_faculty.php sql injection
A vulnerability was found in Kashipara College Management System 1.0 and classified as critical. This issue affects some unknown processing of the file submit_new_faculty.php. The manipulation of the argument address leads to sql injection. The attack may be …
-
Medium 6.3
Kashipara College Management System submit_student.php sql injection
A vulnerability has been found in Kashipara College Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file submit_student.php. The manipulation of the argument date_of_birth leads to sql injection. The attack can…
-
High 7.4
Stored Cross-Site Scripting (XSS) via Profile Picture Upload in parisneo/lollms-webui
A stored Cross-Site Scripting (XSS) vulnerability exists in the parisneo/lollms-webui application due to improper validation of uploaded files in the profile picture upload functionality. Attackers can exploit this vulnerability by uploading malicious HTML fi…
-
Medium 6.3
Kashipara College Management System view_each_faculty.php sql injection
A vulnerability, which was classified as critical, was found in Kashipara College Management System 1.0. This affects an unknown part of the file view_each_faculty.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the…
-
Medium 6.3
SourceCodester Online Computer and Laptop Store manage_brand.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /admin/maintenance/manage_brand.php. The manipulation of the argument id…
-
Low 3.5
Campcodes Online Laundry Management System ajax.php cross site scripting
A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /ajax.php. The manipulation of the argument name/customer_name/username leads to cross site s…
-
Medium 6.3
Campcodes Online Laundry Management System manage_inv.php sql injection
A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as critical. This affects an unknown part of the file /manage_inv.php. The manipulation of the argument id leads to sql injection. It is possible to initiate t…
-
Medium 6.3
Campcodes Online Laundry Management System manage_user.php sql injection
A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manage_user.php. The manipulation of the argument id leads to sql injection. The attack m…
-
Medium 6.3
Campcodes Online Laundry Management System manage_receiving.php sql injection
A vulnerability has been found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manage_receiving.php. The manipulation of the argument id leads to sql injecti…
-
Medium 6.3
Campcodes Online Laundry Management System manage_laundry.php sql injection
A vulnerability, which was classified as critical, was found in Campcodes Online Laundry Management System 1.0. Affected is an unknown function of the file /manage_laundry.php. The manipulation of the argument id leads to sql injection. It is possible to laun…
-
Medium 6.3
Campcodes Online Laundry Management System admin_class.php sql injection
A vulnerability, which was classified as critical, has been found in Campcodes Online Laundry Management System 1.0. This issue affects some unknown processing of the file /admin_class.php. The manipulation of the argument id/delete_category/delete_inv/delete…
-
High 7.5
Contemporary Control System BASrouter BACnet BASRT-B Application Protocol Data Unit denial of service
A vulnerability classified as critical was found in Contemporary Control System BASrouter BACnet BASRT-B 2.7.2. This vulnerability affects unknown code of the component Application Protocol Data Unit. The manipulation leads to denial of service. The attack ca…