Client Details System vulnerabilities

A vulnerability in code-projects Client Details System 1.0, affecting unknown code in the file /welcome.php. Such manipulation leads to cross-site scripting (XSS). The attack may be performed remotely. The exploit has been disclosed publicly.

A vulnerability was found in code-projects Client Details System 1.0. The file clientdetails/welcome.php in the GET Parameter Handler component is affected. Manipulation of the argument ID results in SQL injection. The attack can be initiated remotely and the exploit has been made public.

A vulnerability in code-projects Client Details System 1.0 affects an unknown function in the file /admin/update-profile.php. Manipulation of the argument uid leads to SQL injection. The attack can be executed remotely. The exploit is publicly available and might be used.