Comparison Overview

A weakness has been identified in itsourcecode Online Pet Shop Management System 1.0. This vulnerability affects unknown code of the file /pet1/addcnp.php. This manipulation of the argument cnpname causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

• https://github.com/sec-dreamer/vulpxnPolm/issues/1
• https://itsourcecode.com/
• https://vuldb.com/?ctiid.336362
• https://vuldb.com/?id.336362
• https://vuldb.com/?submit.707271

A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be exploited.

• https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Tenda/AX9_Inte.md
• https://vuldb.com/?ctiid.336361
• https://vuldb.com/?id.336361
• https://vuldb.com/?submit.707213
• https://www.tenda.com.cn/

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

• https://code-projects.org/
• https://github.com/jjjjj-zr/jjjjjzr6/issues/1
• https://vuldb.com/?ctiid.336308
• https://vuldb.com/?id.336308
• https://vuldb.com/?submit.707157
• https://vuldb.com/?submit.709202

A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

• https://code-projects.org/
• https://github.com/jjjjj-zr/jjjjjzr5/issues/1
• https://vuldb.com/?ctiid.336307
• https://vuldb.com/?id.336307
• https://vuldb.com/?submit.707135
• https://vuldb.com/?submit.709197

A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

• https://code-projects.org/
• https://github.com/jjjjj-zr/jjjjjzr4/issues/1
• https://vuldb.com/?ctiid.336306
• https://vuldb.com/?id.336306
• https://vuldb.com/?submit.707132