CVE-2023-49641 | Critical | 9.8 | 2025-05-13 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginCheck.php resource does not… |
CVE-2023-50867 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the signupAction.php resource does not… |
CVE-2023-50866 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginAction.php resource does not… |
CVE-2023-50865 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'city' parameter of the hotelSearch.php resource does not vali… |
CVE-2023-50864 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelId' parameter of the hotelDetails.php resource does not… |
CVE-2023-50863 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelIDHidden' parameter of the generateReceipt.php resource… |
CVE-2023-50862 | Critical | 9.8 | 2024-01-04 | Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelIDHidden' parameter of the booking.php resource does not… |
CVE-2023-50760 | High | 8.8 | 2024-01-04 | Online Notice Board System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'f' parameter of user/update_profile_pic.php page, allowing an au… |
CVE-2023-50753 | Critical | 9.8 | 2024-01-04 | Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the user/update_profile.php reso… |
CVE-2023-50752 | Critical | 9.8 | 2024-01-04 | Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'e' parameter of the login.php resource does not v… |
CVE-2023-50743 | Critical | 9.8 | 2024-01-04 | Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the registration.php resource do… |
CVE-2023-49666 | Critical | 9.8 | 2024-01-04 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'custmer_details' parameter of the submit_material_list.php… |
CVE-2023-49665 | Critical | 9.8 | 2024-01-04 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'quantity[]' parameter of the submit_delivery_list.php resou… |
CVE-2023-49658 | Critical | 9.8 | 2024-01-04 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'bank_details' parameter of the party_submit.php resource do… |
CVE-2023-49639 | Critical | 9.8 | 2024-01-04 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'customer_details' parameter of the buyer_invoice_submit.php… |
CVE-2023-49633 | Critical | 9.8 | 2024-01-04 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'buyer_address' parameter of the buyer_detail_submit.php res… |
CVE-2023-49625 | Critical | 9.8 | 2024-01-04 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the partylist_edit_submit.php resource doe… |
CVE-2023-49624 | Critical | 9.8 | 2024-01-04 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cancelid' parameter of the material_bill.php resource does… |
CVE-2023-49622 | Critical | 9.8 | 2024-01-04 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'itemnameid' parameter of the material_bill.php?action=itemR… |
CVE-2023-49689 | Critical | 9.8 | 2023-12-22 | Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'JobId' parameter of the Employer/DeleteJob.php resource does not… |
CVE-2023-49688 | Critical | 9.8 | 2023-12-22 | Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txtUser' parameter of the login.php resource does not validate th… |
CVE-2023-49681 | Critical | 9.8 | 2023-12-21 | Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cmbQual' parameter of the Employer/InsertWalkin.php resource does… |
CVE-2023-49677 | Critical | 9.8 | 2023-12-21 | Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cmbQual' parameter of the Employer/InsertJob.php resource does no… |
CVE-2023-49272 | Medium | 5.4 | 2023-12-20 | Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'children' parameter of the reservation.php r… |
CVE-2023-49271 | Medium | 5.4 | 2023-12-20 | Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'check_out_date' parameter of the reservation… |
CVE-2023-49270 | Medium | 5.4 | 2023-12-20 | Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'check_in_date' parameter of the reservation… |
CVE-2023-49269 | Medium | 5.4 | 2023-12-20 | Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'adults' parameter of the reservation.php res… |
CVE-2023-5011 | High | 8.8 | 2023-12-20 | Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursename' parameter of the marks.php resource doe… |
CVE-2023-5010 | High | 8.8 | 2023-12-20 | Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'coursecode' parameter of the marks.php resource doe… |
CVE-2023-5007 | High | 8.8 | 2023-12-20 | Student Information System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'id' parameter of the marks.php resource does not va… |
CVE-2023-5008 | Critical | 9.8 | 2023-12-08 | Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'regno' parameter of index.php page, allowing an externa… |
CVE-2023-4122 | Critical | 9.9 | 2023-12-07 | Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated a… |