Skip to content
OpenAdvisories

Archive

29 September 2024

Vulnerabilities first published on this day (UTC), newest first.

9 results · Feed

  • Medium 6.3

    SourceCodester Advocate Office Management System edit_client.php sql injection

    A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /control/edit_client.php. The manipulation of the argument id leads to sql injection. The …

  • Medium 6.3

    code-projects Blood Bank System forgot.php sql injection

    A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forgot.php. The manipulation of the argument useremail leads to sql injection. The attack can be initiated…

  • High 7.3
    CVE-2024-9326 Public exploit

    PHPGurukul Online Shopping Portal Admin Panel index.php sql injection

    A vulnerability classified as critical was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /shopping/admin/index.php of the component Admin Panel. The manipulation of the argument username leads to sql injec…

  • High 7.8

    Intelbras InControl incontrol-service-watchdog.exe unquoted search path

    A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56. This affects an unknown part of the file C:\Program Files (x86)\Intelbras\Incontrol Cliente\incontrol_webcam\incontrol-service-watchdog.exe. The manipulation leads to …

  • Medium 6.3

    Intelbras InControl Relatório de Operadores Page operador code injection

    A vulnerability was found in Intelbras InControl up to 2.21.57. It has been rated as critical. Affected by this issue is some unknown functionality of the file /v1/operador/ of the component Relatório de Operadores Page. The manipulation of the argument field…

  • Low 3.5

    SourceCodester Inventory Management System add_staff.php cross site scripting

    A vulnerability was found in SourceCodester Inventory Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /app/action/add_staff.php. The manipulation leads to cross site scripting.…

  • Medium 6.3

    code-projects Supply Chain Management edit_manufacturer.php sql injection

    A vulnerability was found in code-projects Supply Chain Management 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/edit_manufacturer.php. The manipulation of the argument id leads to sql injection. It is possible to…

  • Medium 5.3

    SourceCodester Online Railway Reservation System view_details.php access control

    A vulnerability was found in SourceCodester Online Railway Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/inquiries/view_details.php. The manipulation of the argument id leads to improper acces…

  • Low 3.5

    SourceCodester Online Timesheet App Add Timesheet Form add-timesheet.php cross site scripting

    A vulnerability has been found in SourceCodester Online Timesheet App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /endpoint/add-timesheet.php of the component Add Timesheet Form. The manipulation of the argument day/…