CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-4972 – code-projects Simple Chat System login.php sql injection
https://notcve.org/view.php?id=CVE-2024-4972
A vulnerability classified as critical has been found in code-projects Simple Chat System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/BurakSevben/CVEs/blob/main/Simple%20Chat%20App/Simple%20Chat%20App%20-%20SQL%20Injection%20-%201.md https://vuldb.com/?ctiid.264537 https://vuldb.com/?id.264537 https://vuldb.com/?submit.335199 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3369 – code-projects Car Rental add-vehicle.php unrestricted upload
https://notcve.org/view.php?id=CVE-2024-3369
A vulnerability, which was classified as critical, has been found in code-projects Car Rental 1.0. Affected by this issue is some unknown functionality of the file add-vehicle.php. The manipulation of the argument Upload Image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://drive.google.com/file/d/1wLMnGzcbyCoZ_Wp-bHpLD49MZ9-XHPUK/view?usp=drive_link https://vuldb.com/?ctiid.259490 https://vuldb.com/?id.259490 https://vuldb.com/?submit.311147 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 4.0EPSS: 0%CPEs: 1EXPL: 2CVE-2024-3004 – code-projects Online Book System Product.php cross site scripting
https://notcve.org/view.php?id=CVE-2024-3004
A vulnerability was found in code-projects Online Book System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /Product.php. The manipulation of the argument value leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/W01fh4cker/CVE-2024-30043-XXE https://github.com/BurakSevben/CVEs/blob/main/Online%20Book%20System/Online%20Book%20System%20-%20Cross-Site-Scripting.md https://vuldb.com/?ctiid.258206 https://vuldb.com/?id.258206 https://vuldb.com/?submit.305059 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3003 – code-projects Online Book System cart.php sql injection
https://notcve.org/view.php?id=CVE-2024-3003
A vulnerability has been found in code-projects Online Book System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cart.php. The manipulation of the argument quantity/remove leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/BurakSevben/CVEs/blob/main/Online%20Book%20System/Online%20Book%20System-%20SQL%20Injection%20-%205.md https://vuldb.com/?ctiid.258205 https://vuldb.com/?id.258205 https://vuldb.com/?submit.305057 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-3002 – code-projects Online Book System description.php sql injection
https://notcve.org/view.php?id=CVE-2024-3002
A vulnerability, which was classified as critical, was found in code-projects Online Book System 1.0. Affected is an unknown function of the file /description.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/BurakSevben/CVEs/blob/main/Online%20Book%20System/Online%20Book%20System-%20SQL%20Injection%20-%204.md https://vuldb.com/?ctiid.258204 https://vuldb.com/?id.258204 https://vuldb.com/?submit.305056 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •