Skip to content
OpenAdvisories

Archive

August 2024

Vulnerabilities first published in this month (UTC), newest first.

2,918 results · Feed

  • Critical 9.8

    School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter…

  • High 8.6

    Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id paramete…

  • High 8.8

    A Cross-Site Request Forgery (CSRF) in the component admin_modify_room.php of Hotel Management System commit 91caab8 al…

  • High 8.0

    A Cross-Site Request Forgery (CSRF) in the component edit_product.php of Warehouse Inventory System v2.0 allows attacke…

  • Critical 9.8

    School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter…

  • Critical 9.8

    An issue in the login component (process_login.php) of Hotel Management System commit 79d688 allows attackers to authen…

  • High 8.8

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_widgets.p…

  • High 8.8

    A Cross-Site Request Forgery (CSRF) in the component delete_user.php of Warehouse Inventory System v2.0 allows attacker…

  • High 8.8

    Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number…

  • High 8.8

    A Cross-Site Request Forgery (CSRF) in the component add_product.php of Warehouse Inventory System v2.0 allows attacker…

  • Critical 9.8

    ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/c…

  • High 8.8

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_config.ph…

  • High 8.8

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/submit_page.php.

  • High 7.1

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.ph…

  • Medium 5.7

    A Cross-Site Request Forgery (CSRF) in the component edit_group.php of Warehouse Inventory System v2.0 allows attackers…

  • Critical 9.8

    School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter…

  • High 7.1

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/edit_page.php?l…

  • Critical 9.8

    School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at…

  • High 8.8

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.ph…

  • High 8.8

    A Cross-Site Request Forgery (CSRF) in the component delete_media.php of Warehouse Inventory System v2.0 allows attacke…

  • Critical 9.8

    School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter…

  • High 7.5

    Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure.

  • High 8.8

    A Cross-Site Request Forgery (CSRF) in the component categorie.php of Warehouse Inventory System v2.0 allows attackers …

  • High 8.8

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_manageme…

  • Medium 6.1

    A cross-site scripting (XSS) vulnerability in the component update_page_details.php of Blood Bank And Donation Manageme…

  • High 8.8

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain_manageme…

  • High 8.8

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_backup.ph…

  • High 8.8

    A Cross-Site Request Forgery (CSRF) in the component edit_categorie.php of Warehouse Inventory System v2.0 allows attac…

  • High 7.5

    An issue in apollocongif apollo v.2.2.0 allows a remote attacker to obtain sensitive information via a crafted request.

  • Critical 9.8

    School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter…

  • High 8.8

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_editor.php

  • Critical 9.6

    A Cross-Site Request Forgery (CSRF) in the component delete_group.php of Warehouse Inventory System v2.0 allows attacke…

  • High 8.8

    A Cross-Site Request Forgery (CSRF) in the component admin_room_added.php of Hotel Management System commit 91caab8 all…

  • High 8.8

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_id=1&mode=…

  • High 7.6

    ERP commit 44bd04 was discovered to contain a SQL injection vulnerability via the id parameter at /index.php/basedata/i…

  • Critical 9.8
    CVE-2024-42919 Public exploit

    eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport.

  • High 8.8

    Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_group.php…

  • High 8.8

    A Cross-Site Request Forgery (CSRF) in the component delete_categorie.php of Warehouse Inventory System v2.0 allows att…

  • High 8.8

    A Cross-Site Request Forgery (CSRF) in the component admin_room_removed.php of Hotel Management System commit 91caab8 a…

  • High 8.8

    A Cross-Site Request Forgery (CSRF) in the component add_group.php of Warehouse Inventory System v2.0 allows attackers …