Criminal-Management-System vulnerabilities

A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This affects the function mysqli_error of the file Officers/addOfficer.php of the component Officer Registration Form; manipulation of the argument offName/offID/ID/contact/gender/weapon/role results in SQL injection. The attack can be initiated remotely, and the exploit is now public and may be used.

A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this issue is the function mysqli_query of the file Officers/searchOff.php of the component Search Page; manipulation of the argument Search leads to SQL injection. The attack may be performed from remote, and the exploit has been disclosed publicly and may be used.

A SQL injection vulnerability was found in vraj404 Criminal Management System in home.php within the Submission Form. Manipulation of the id/name/offName/crime/dob/arrDate/crimeDate/sex/address/folder/more arguments allows SQL injection. The attack can be performed remotely and a public exploit is available.

A SQL injection vulnerability exists in search.php of vraj404 Criminal-Management-System via manipulation of the Search argument. The attack can be executed remotely and a public exploit has been released.

An unrestricted file upload vulnerability exists in the move_uploaded_file function in home.php of vraj404 Criminal-Management-System via manipulation of the my_img argument. Remote exploitation is possible and a public exploit is available.