CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-8944 – code-projects Hospital Management System check_availability.php sql injection
https://notcve.org/view.php?id=CVE-2024-8944
A vulnerability, which was classified as critical, was found in code-projects Hospital Management System 1.0. This affects an unknown part of the file check_availability.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://vuldb.com/?id.277761 https://vuldb.com/?ctiid.277761 https://vuldb.com/?submit.408871 https://github.com/65241/cve/issues/1 https://code-projects.org • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-8868 – code-projects Crud Operation System savedata.php sql injection
https://notcve.org/view.php?id=CVE-2024-8868
A vulnerability was found in code-projects Crud Operation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file savedata.php. The manipulation of the argument sname leads to sql injection. The attack may be initiated remotely. • https://code-projects.org https://github.com/ppp-src/a/issues/7 https://vuldb.com/?ctiid.277505 https://vuldb.com/?id.277505 https://vuldb.com/?submit.408322 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-8762 – code-projects Crud Operation System updatedata.php sql injection
https://notcve.org/view.php?id=CVE-2024-8762
A vulnerability was found in code-projects Crud Operation System 1.0. It has been classified as critical. This affects an unknown part of the file /updatedata.php. The manipulation of the argument sid leads to sql injection. It is possible to initiate the attack remotely. • https://code-projects.org https://github.com/Kangsiyuan/1/issues/1 https://vuldb.com/?ctiid.277341 https://vuldb.com/?id.277341 https://vuldb.com/?submit.406159 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-8710 – code-projects Inventory Management Products Table Page viewProduct.php sql injection
https://notcve.org/view.php?id=CVE-2024-8710
A vulnerability classified as critical was found in code-projects Inventory Management 1.0. Affected by this vulnerability is an unknown functionality of the file /model/viewProduct.php of the component Products Table Page. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://code-projects.org https://github.com/ali0999109/Inventory-management/blob/main/Sql.md https://vuldb.com/?ctiid.277219 https://vuldb.com/?id.277219 https://vuldb.com/?submit.404976 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.9EPSS: 0%CPEs: 1EXPL: 1CVE-2024-8605 – code-projects Inventory Management Registration Form registration.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-8605
A vulnerability classified as problematic was found in code-projects Inventory Management 1.0. This vulnerability affects unknown code of the file /view/registration.php of the component Registration Form. The manipulation with the input <script>alert(1)</script> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. • https://vuldb.com/?id.276832 https://vuldb.com/?ctiid.276832 https://vuldb.com/?submit.404711 https://github.com/ali0999109/Inventory-management https://code-projects.org • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •