CVE-2024-7636 – code-projects Simple Ticket Booking Login authenticate.php sql injection
https://notcve.org/view.php?id=CVE-2024-7636
A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file authenticate.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attack can be launched remotely. • https://github.com/space-security/cve/issues/1 https://vuldb.com/?ctiid.274057 https://vuldb.com/?id.274057 https://vuldb.com/?submit.386671 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVE-2024-7635 – code-projects Simple Ticket Booking Registration register_insert.php sql injection
https://notcve.org/view.php?id=CVE-2024-7635
A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been classified as critical. Affected is an unknown function of the file register_insert.php of the component Registration Handler. The manipulation of the argument name/email/dob/password/Gender/phone leads to sql injection. It is possible to launch the attack remotely. • https://github.com/space-security/cve/issues/2 https://vuldb.com/?ctiid.274056 https://vuldb.com/?id.274056 https://vuldb.com/?submit.386667 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVE-2024-7311 – code-projects Online Bus Reservation Site register.php sql injection
https://notcve.org/view.php?id=CVE-2024-7311
A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file register.php. The manipulation of the argument Email leads to sql injection. The attack may be initiated remotely. • https://github.com/23588hk/cve/issues/1 https://vuldb.com/?ctiid.273203 https://vuldb.com/?id.273203 https://vuldb.com/?submit.383201 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVE-2024-6808 – itsourcecode Simple Task List signUp.php insertUserRecord sql injection
https://notcve.org/view.php?id=CVE-2024-6808
A vulnerability was found in itsourcecode Simple Task List 1.0. It has been classified as critical. This affects the function insertUserRecord of the file signUp.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. • https://github.com/qianqiusujiu/cve/issues/1 https://vuldb.com/?ctiid.271707 https://vuldb.com/?id.271707 https://vuldb.com/?submit.375154 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVE-2024-6745 – code-projects Simple Ticket Booking Login adminauthenticate.php sql injection
https://notcve.org/view.php?id=CVE-2024-6745
A vulnerability classified as critical has been found in code-projects Simple Ticket Booking 1.0. Affected is an unknown function of the file adminauthenticate.php of the component Login. The manipulation of the argument email/password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/xzyxiaohaha/cve/issues/2 https://vuldb.com/?ctiid.271476 https://vuldb.com/?id.271476 https://vuldb.com/?submit.374770 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •