Vulnerabilidades

An issue was discovered in Online Reviewer Management System v1.0. There is a SQL injection that can directly issue instructions to the background database system via reviewer_0/admins/assessments/course/course-update.php.

An issue was discovered in Online Reviewer Management System v1.0. There is a XSS vulnerability via reviewer_0/admins/assessments/course/course-update.php.

A vulnerability has been found in SourceCodester Online Pet Shop We App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /pet_shop/admin/orders/update_status.php. The manipulation of the argument oid with the input 1"><script>alert(1111)</script> leads to cross site scripting. The…

A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file tracking/admin/add_acc.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The…

A vulnerability classified as critical has been found in SourceCodester Online Reviewer Management System 1.0. Affected is an unknown function of the file /reviewer_0/admins/assessments/pretest/questions-view.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely.…

Una vulnerabilidad de inyección SQL en sourcecodester online-book-store 1.0 permite a atacantes remotos ver información confidencial a través del parámetro id en la URL de la aplicación.

Se ha encontrado una vulnerabilidad en SourceCodester Online Boat Reservation System 1.0 y se ha clasificado como problemática. Una función desconocida del archivo /boat/login.php del componente POST Parameter Handler es afectada por esta vulnerabilidad. La manipulación del argumento un conduce a cross-site scripting.…

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=save_user. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has…

A vulnerability classified as problematic was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file index.php?page=checkout. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may…

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NTN Information Technologies Online Services Software allows SQL Injection. This issue affects Online Services Software: before 1.17.

Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.

A vulnerability classified as problematic was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=orders/view_order. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has…

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file view_prod.php of the component GET Parameter Handler. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The…

A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0. Affected by this vulnerability is the function delete_category of the file ajax.php of the component POST Parameter Handler. The manipulation leads to missing authentication. The attack can be launched remotely. The…

Existe una vulnerabilidad de inyección SQL en Projectworlds Online Doctor Appointment Booking System, que permite a los atacantes obtener información confidencial a través del parámetro q en el endpoint getuser.php.

Se ha encontrado una vulnerabilidad en SourceCodester Online Pizza Ordering System 1.0 y clasificada como crítica. Esta vulnerabilidad afecta a un código desconocido del archivo /php-opos/index.php. La manipulación del argumento ID conduce a la inyección SQL. El ataque se puede iniciar de forma remota. El exploit ha…

Microsoft Word Remote Code Execution Vulnerability

Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter.

An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file.

A vulnerability classified as problematic was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file check_availability.php. The manipulation of the argument username leads to exposure of sensitive information through data queries. The attack can be…

A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. Affected is an unknown function of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public…

A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is the function registration of the file oews/classes/Users.php of the component POST Request Handler. The manipulation of the argument firstname/middlename/lastname/email/contact…

Se encontró una vulnerabilidad en OpenSeaMap online_chart 1.2. Ha sido clasificada como problemática. La función init del archivo index.php es afectada por la vulnerabilidad. La manipulación del argumento mtext conduce a cross-site scripting. Es posible lanzar el ataque de forma remota. La actualización a la versión…

Se encontró una vulnerabilidad en SourceCodester Online Eyewear Shop 1.0. Ha sido clasificada como crítica. Esto afecta a la función update_cart del archivo /oews/classes/Master.php?f=update_cart del componente HTTP POST Request Handler. La manipulación del argumento cart_id conduce a la inyección de SQL. Es posible…

Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at view_order.php.