CVE Vulnerability Catalog

W systemie Simple Scheduling System 1.0 odkryto podatność, która dotyczy nieznanego przetwarzania pliku /schedulingsystem/addcourse.php. Manipulacja argumentem corcode prowadzi do wstrzyknięcia SQL, co może być zrealizowane zdalnie.

W systemie Simple Scheduling System 1.0 odkryto podatność, która dotyczy nieznanego kodu w pliku /schedulingsystem/addfaculty.php. Manipulacja argumentem falname prowadzi do wstrzykiwania SQL, co umożliwia zdalne przeprowadzenie ataku.

W systemie Simple Scheduling System 1.0 odkryto lukę, która dotyczy nieznanej części pliku /schedulingsystem/addsubject.php. Manipulacja argumentem subcode prowadzi do wstrzykiwania SQL.

A SQL injection vulnerability was detected in CodeAstro Electricity Billing System 1.0 in the /admin/bill.php file. Manipulation of the uid argument allows remote exploitation. The exploit is now public.

A security vulnerability has been detected in Projectworlds Online Tours and Travels 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/change-image.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

W systemie zarządzania nauką online Campcodes w wersji 1.0 zidentyfikowano słabość. Manipulacja argumentem Title w pliku /admin/edit_content.php może prowadzić do wstrzyknięcia SQL. Atak może być przeprowadzony zdalnie.

W systemie itsourcecode Open Source Job Portal w wersji 1.0 odkryto lukę bezpieczeństwa, która dotyczy nieznanej funkcji w pliku /jobportal/admin/company/index.php?view=edit. Manipulacja argumentem ID prowadzi do wstrzykiwania SQL.

A vulnerability was identified in D-Link DIR-823X 250416, involving command injection in function uci_set of /goform/set_wifi_blacklists. Manipulation leads to remote command execution. The exploit is publicly available.

A vulnerability was determined in D-Link DIR-823X 250416, involving command injection in function uci_del of /goform/delete_prohibiting. Manipulation of delvalue allows remote command execution. The exploit is publicly disclosed.

A vulnerability was found in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_wifi_blacklists. Manipulation of the argument macList results in command injection. The attack may be performed from remote, and the exploit has been made public.

A vulnerability was found in D-Link DIR-823X 250416, involving command injection in /goform/set_device_name. Manipulation of mac allows remote command execution. The exploit is publicly disclosed.

A flaw was found in D-Link DIR-823X 250416, involving command injection in /goform/diag_traceroute. Manipulation of target_addr allows remote command execution. The exploit is published.

A vulnerability was detected in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/delete_offline_device. Manipulation of the argument delvalue results in command injection. Remote exploitation is possible, and the exploit is now public.

Wykryto podatność bezpieczeństwa w projekcie E-Commerce Website w wersji 1.0, która dotyczy nieznanej części pliku /pages/admin_product_details.php. Manipulacja argumentem prod_id prowadzi do wstrzyknięcia SQL.

A weakness was identified in D-Link DIR-823X 250416, involving command injection in function sub_412E7C of /goform/set_switch_settings. Manipulation of port allows remote command execution. The exploit is publicly available.

A buffer overflow vulnerability has been discovered in Tenda AC21 up to 16.03.08.16, affecting the sscanf function in /goform/SetStaticRouteCfg. Manipulation of the list argument results in buffer overflow. The attack can be launched remotely and the exploit has been released to the public.

A SQL injection vulnerability was identified in itsourcecode Open Source Job Portal 1.0 in the /admin/employee/index.php?view=edit file. Manipulation of the ID argument allows remote exploitation. The exploit is publicly available.

W systemie CourseSelectionSystem firmy kidaze zidentyfikowano podatność, która dotyczy nieznanej funkcji w pliku /Profilers/PriProfile/COUNT3s4.php. Manipulacja argumentem cbranch może prowadzić do wstrzyknięcia SQL, co umożliwia zdalne przeprowadzenie ataku.

A SQL injection vulnerability was identified in itsourcecode Open Source Job Portal 1.0 in the /admin/vacancy/index.php?view=edit file. Manipulation of the ID argument allows remote exploitation. The exploit has been made public.

A vulnerability was found in GNU Binutils 2.45 in the elf_swap_shdr function in the bfd/elfcode.h library of the Linker component. Manipulation leads to a heap-based buffer overflow. The attack must be performed locally, and the exploit has been publicly disclosed.