CVE Vulnerability Catalog

A SQL injection vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0 in the file /admin/girlsproductdeletequery.php. An unknown function allows manipulation of the user_id argument, enabling remote SQL injection. The exploit is publicly available and may be used.

A SQL injection vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0 in the file /admin/mensproductdeletequery.php. An attacker can remotely manipulate the user_id argument, leading to SQL injection. The exploit has been publicly disclosed.

A SQL injection vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0 in the file /admin/login.php. An attacker can remotely manipulate the Username argument, leading to SQL injection. The exploit has been made public and could be used.

A vulnerability was found in grass up to version 0.13.4 in the functions grass_compiler::selector::extend and grass_compiler::evaluate::visitor, allowing a local denial of service attack. The maintainer states that DoS vulnerabilities are generally acceptable in Sass compilers due to the exponential nature of the @extend algorithm.

The silent Just-In-Time (JIT) provisioning feature in federated authentication implementations fails to properly segregate user roles during account creation when a federated user shares a username with a local user. This allows the provisioning process to overwrite existing roles of local users with roles assigned to the federated user.

A denial of service vulnerability has been found in the grass library up to version 0.13.4 in the grass_compiler::raw_to_parse_error function of the UTF-8 Character Handler component. A local attack can cause denial of service. The maintainer considers DoS vulnerabilities acceptable in Sass compilers.

A vulnerability was found in code-projects Online Voting System 1.0 in the file /saveVote.php. The test_input function fails to properly sanitize user input, allowing SQL injection via the voterName, voterEmail, voterID, and selectedCandidate parameters. The attack can be performed remotely.

A SQL injection vulnerability was found in the Online Voting System up to version 1.0 in the test_input function of /authentication.php (Login component). Manipulating adminUserName/adminPassword arguments allows remote SQL injection.

A vulnerability has been identified in the onnxruntime component of the onnx library up to version 1.21.x, involving an out-of-bounds read in the convPoolShapeInference_opset19 function in onnx/defs/nn/old.cc. The attack can be initiated remotely, and the exploit has been made public.

A SQL injection vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the /edit_class2.php file. Manipulation of the ID argument allows remote SQL injection. The exploit is publicly available.

A SQL injection vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0 in the /edit_course.php file. An attacker can remotely manipulate the ID argument, leading to unauthorized database access. The exploit has been publicly disclosed and may be used.

A SQL injection vulnerability was found in CodeAstro Apartment Visitor Management System 1.0 in the /index.php file within the Login component. Manipulating the Username argument allows an attacker to inject SQL code. The attack can be performed remotely and the exploit has been made public.

A SQL injection vulnerability has been found in CodeAstro Ecommerce Website 1.0 in the file /ecommerce-website-php/customer/my_account.php?edit_account. The attack involves manipulating the c_name argument, allowing remote SQL injection. The exploit has been publicly disclosed.

A SQL injection vulnerability has been found in itsourcecode Hospital Management System 1.0 in the /patient.php file. An attacker can remotely manipulate the editid argument, leading to unauthorized database access. The exploit has been published and may be used.

A deserialization vulnerability was found in the getCartItems function of ShoppingCart.php in Ecommerce-CodeIgniter-Bootstrap. The attack can be launched remotely by manipulating the shopping_cart argument. The exploit has been publicly disclosed, increasing the risk of exploitation.

Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl lack OAuth 2.0 state parameter support. The authentication_url method does not issue a state value, and the callback method does not verify the callback corresponds to the session's authorization request, enabling login CSRF attacks.

The vulnerability in the Plack::Middleware::OAuth library for Perl (versions up to 0.10) is due to missing support for the OAuth 2.0 state parameter. The authorization request does not generate a unique identifier, and the callback code verification does not check if it originates from the same session, enabling login CSRF attacks.

A path traversal vulnerability has been identified in the Vendor Image Manager component of Ecommerce-CodeIgniter-Bootstrap. The do_upload_others_images function in AddProduct.php allows manipulation of the folder argument, enabling remote file access outside the intended directory.

A path traversal vulnerability was discovered in Ecommerce-CodeIgniter-Bootstrap up to commit 222ff31c06687b1c6d0e1ab63953f82c3674c52b in the file application/modules/vendor/controllers/AddProduct.php of the Vendor Multi-Image Endpoint. An attacker can remotely manipulate the folder argument, leading to unauthorized file access. The exploit has been publicly released and may be used in attacks.

A vulnerability was found in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to version 213babdbaa949e94557246414db0130e01394517. The checkForPostRequests function in application/core/MY_Controller.php is affected by cross-site scripting via the User-Agent argument, allowing remote attacks.