Archive
31 July 2024
Vulnerabilities first published on this day (UTC), newest first.
54 results · Clear filters · Feed
-
Medium 6.3
SourceCodester Establishment Billing Management System sql injection
A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_block. The manipulation of the argument i…
-
Medium 6.3
SourceCodester Establishment Billing Management System manage_user.php sql injection
A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /manage_user.php. The manipulation of the argument id leads to sql injection. It is possib…
-
Medium 6.5
A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacke…
-
Medium 6.0
A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacke…
-
Medium 4.9
A vulnerability has been found in Dahua products. After obtaining the administrator's username and password, the attac…
-
Medium 6.3
SourceCodester Lot Reservation Management System manage_user.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Lot Reservation Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/manage_user.php. The manipulation of the argument id leads to sq…
-
Medium 6.3
SourceCodester Lot Reservation Management System manage_model.php sql injection
A vulnerability classified as critical was found in SourceCodester Lot Reservation Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/manage_model.php. The manipulation of the argument id leads to sql injectio…
-
Medium 6.3
SourceCodester Lot Reservation Management System sql injection
A vulnerability classified as critical has been found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown function of the file /admin/index.php?page=manage_lot. The manipulation of the argument id leads to sql injection. It is poss…
-
Medium 6.3
SourceCodester Lot Reservation Management System view_reserved.php sql injection
A vulnerability was found in SourceCodester Lot Reservation Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/view_reserved.php. The manipulation of the argument id leads to sql injection. The …
-
Medium 4.7
itsourcecode Alton Management System team_save.php sql injection
A vulnerability was found in itsourcecode Alton Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/team_save.php. The manipulation of the argument team leads to sql injection. It is possible to initiate …
-
Medium 6.1
An issue was discovered in the IhisiServiceSmm module in Insyde InsydeH2O with kernel 5.2 before 05.28.42, 5.3 before 0…
-
Medium 5.3
An issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey() disables host key verificat…
-
Medium 5.3
An issue was discovered in filestash v0.4. The usage of the ssh.InsecureIgnoreHostKey() disables host key verification,…
-
Medium 5.9
Filestash skips TLS certificate verification process when sending out email verification codes
Default configurations in the ShareProofVerifier function of filestash v0.4 causes the application to skip the TLS certificate verification process when sending out email verification codes, possibly allowing attackers to access sensitive data via a man-in-th…