Filtered by CWE-89
Total 13479 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-7682 2 Code-projects, Fabianros 2 Job Portal, Job Portal 2024-08-15 7.3 High
A vulnerability was found in code-projects Job Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file rw_i_nat.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-7681 2 Code-projects, College Management System Project 2 College Management System, College Management System 2024-08-15 7.3 High
A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument email/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-7680 2 Angeljudesuarez, Itsourcecode 2 Tailoring Management System, Tailoring Management System 2024-08-15 6.3 Medium
A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file /incedit.php?id=4. The manipulation of the argument id/inccat/desc/date/amount leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-5678 1 Zohocorp 1 Manageengine Applications Manager 2024-08-15 4.7 Medium
Zohocorp ManageEngine Applications Manager versions 170900 and below are vulnerable to the authenticated admin-only SQL Injection in the Create Monitor feature.
CVE-2024-7676 2 Oretnom23, Sourcecodester 2 Car Driving School Management System, Car Driving School Management System 2024-08-15 6.3 Medium
A vulnerability was found in Sourcecodester Car Driving School Management System 1.0. It has been classified as critical. Affected is the function save_package of the file /classes/Master.php?f=save_package. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-7669 2 Oretnom23, Sourcecodester 2 Car Driving School Management System, Car Driving School Management System 2024-08-15 6.3 Medium
A vulnerability was found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This issue affects the function delete_enrollment of the file Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-7668 2 Oretnom23, Sourcecodester 2 Car Driving School Management System, Car Driving School Management System 2024-08-15 6.3 Medium
A vulnerability has been found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This vulnerability affects the function delete_package of the file Master.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-7667 2 Oretnom23, Sourcecodester 2 Car Driving School Management System, Car Driving School Management System 2024-08-15 6.3 Medium
A vulnerability, which was classified as critical, was found in SourceCodester Car Driving School Management System 1.0. This affects the function delete_users of the file User.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-7666 2 Oretnom23, Sourcecodester 2 Car Driving School Management System, Car Driving School Management System 2024-08-15 6.3 Medium
A vulnerability, which was classified as critical, has been found in SourceCodester Car Driving School Management System 1.0. Affected by this issue is some unknown functionality of the file view_package.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-7665 2 Oretnom23, Sourcecodester 2 Car Driving School Management System, Car Driving School Management System 2024-08-15 6.3 Medium
A vulnerability classified as critical was found in SourceCodester Car Driving School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file manage_package.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-7664 2 Oretnom23, Sourcecodester 2 Car Driving School Management System, Car Driving School Management System 2024-08-15 6.3 Medium
A vulnerability classified as critical has been found in SourceCodester Car Driving School Management System 1.0. Affected is an unknown function of the file view_details.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-7663 2 Oretnom23, Sourcecodester 2 Car Driving School Management System, Car Driving School Management System 2024-08-15 6.3 Medium
A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file manage_user.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-33958 1 Janobe 2 Enegosyo System, Young Entrepreneur E-negosyo System 2024-08-15 9.8 Critical
SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'phonenumber' in '/passwordrecover.php' parameter.
CVE-2024-33957 1 Janobe 2 Enegosyo System, Young Entrepreneur E-negosyo System 2024-08-15 9.8 Critical
SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'id' in '/admin/orders/controller.php' parameter
CVE-2024-33960 1 Janobe 6 Credit Card, Debit Card Payment, Janobe Credit Card and 3 more 2024-08-15 9.8 Critical
SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'end' in '/admin/mod_reports/printreport.php' parameter.
CVE-2024-40472 2 Rems, Sourcecodester 2 Daily Calories Monitoring Tool, Daily Calories Monitoring Tool 2024-08-15 6.5 Medium
Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php."
CVE-2024-7311 2 Code-projects, Fabianros 2 Online Bus Reservation Site, Online Bus Reservation Site 2024-08-13 7.3 High
A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file register.php. The manipulation of the argument Email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273203.
CVE-2024-7308 2 Oretnom23, Sourcecodester 2 Establishment Billing Management System, Establishment Billing Management System 2024-08-13 6.3 Medium
A vulnerability was found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view_bill.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273200.
CVE-2024-7307 2 Oretnom23, Sourcecodester 2 Establishment Billing Management System, Establishment Billing Management System 2024-08-13 6.3 Medium
A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /manage_billing.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273199.
CVE-2024-7290 2 Oretnom23, Sourcecodester 2 Establishment Billing Management System, Establishment Billing Management System 2024-08-13 6.3 Medium
A vulnerability classified as critical has been found in SourceCodester Establishment Billing Management System 1.0. This affects an unknown part of the file /manage_tenant.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273159.