Show filters
407 Total Results
Displaying 51-60 of 407
Sort by:
Attacker Value
Unknown

CVE-2024-7275

Disclosure Date: July 30, 2024 (last updated August 14, 2024)
A vulnerability, which was classified as critical, was found in itsourcecode Alton Management System 1.0. Affected is an unknown function of the file /admin/category_save.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273144.
Attacker Value
Unknown

CVE-2024-7274

Disclosure Date: July 30, 2024 (last updated August 14, 2024)
A vulnerability, which was classified as critical, has been found in itsourcecode Alton Management System 1.0. This issue affects some unknown processing of the file /reservation_status.php. The manipulation of the argument rcode leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273143.
Attacker Value
Unknown

CVE-2024-7273

Disclosure Date: July 30, 2024 (last updated August 14, 2024)
A vulnerability classified as critical was found in itsourcecode Alton Management System 1.0. This vulnerability affects unknown code of the file search.php. The manipulation of the argument rcode leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273142 is the identifier assigned to this vulnerability.
Attacker Value
Unknown

CVE-2024-6966

Disclosure Date: July 22, 2024 (last updated August 13, 2024)
A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file login.php of the component Login. The manipulation of the argument user/pass leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272120.
Attacker Value
Unknown

CVE-2024-37112

Disclosure Date: July 09, 2024 (last updated August 03, 2024)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.
Attacker Value
Unknown

CVE-2024-1153

Disclosure Date: June 27, 2024 (last updated September 17, 2024)
Improper Access Control vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel APPS: before v17.0.68.
Attacker Value
Unknown

CVE-2024-1107

Disclosure Date: June 27, 2024 (last updated September 17, 2024)
Authorization Bypass Through User-Controlled Key vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel APPS: before v17.0.68.
Attacker Value
Unknown

CVE-2024-37677

Disclosure Date: June 24, 2024 (last updated June 27, 2024)
An issue in Shenzhen Weitillage Industrial Co., Ltd the access management specialist V6.62.51215 allows a remote attacker to obtain sensitive information.
Attacker Value
Unknown

CVE-2024-37111

Disclosure Date: June 24, 2024 (last updated August 21, 2024)
Missing Authorization vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7.
Attacker Value
Unknown

CVE-2024-37109

Disclosure Date: June 24, 2024 (last updated August 22, 2024)
Improper Control of Generation of Code ('Code Injection') vulnerability in Membership Software WishList Member X allows Code Injection.This issue affects WishList Member X: from n/a before 3.26.7.