Ahmadmarzouk

**Name of the Vulnerable Software and Affected Versions** Employee Management System version 1.0 **Description** A SQL injection flaw exists in the Endpoint component within the file '/370project/process/eprocess.php'. A remote attacker can exploit this by manipulating the `pwd` argument. **Recommendations** As a temporary workaround, restrict access to the '/370project/process/eprocess.php' file or avoid using the `pwd` parameter until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions code-projects Online Library Management System version 1.0 Description A vulnerability exists in code-projects Online Library Management System 1.0 that may lead to information disclosure. The issue is related to a manipulation of an unknown function within the `/sql/library.sql` file of the SQL Database Backup File Handler component. The attack can be initiated remotely and the exploit has been made public. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions Easy Blog Site versions prior to 1.0 Description A weakness exists in Easy Blog Site up to version 1.0. The issue is related to a SQL injection vulnerability in an unknown function within the `/users/contact us.php` file. Manipulating the `Name` argument can trigger the injection. The attack can be launched remotely and the exploit is publicly available. Recommendations Update Easy Blog Site to a version later than 1.0.

Name of the Vulnerable Software and Affected Versions code-projects Online Application System for Admission version 1.0 Description A vulnerability exists in code-projects Online Application System for Admission 1.0, specifically involving an unknown function within the `/enrollment/database/oas.sql` file. This allows for insecure storage of sensitive information through manipulation. The attack can be carried out remotely, and the exploit has been made public. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions code-projects Online Application System for Admission version 1.0 Description A SQL injection issue exists due to unknown processing of the file `/enrollment/admsnform.php` of the Endpoint component. This manipulation can be executed remotely. The exploit has been disclosed to the public. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Online FIR System version 1.0 **Description** A remote SQL injection exists in the Login component within the '/Login/checklogin.php' endpoint. The issue occurs when manipulating the `email` and `password` arguments, allowing an attacker to interfere with the database queries. **Recommendations** Update code-projects Online FIR System version 1.0 to a patched version. As a temporary workaround, restrict access to the '/Login/checklogin.php' endpoint to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions code-projects Online FIR System version 1.0 Description A vulnerability exists in code-projects Online FIR System 1.0 related to insecure storage of sensitive information. The issue is associated with an unknown functionality within the `/complaints.sql` file of the SQL Database Backup File Handler component. This manipulation can be performed remotely and the exploit is publicly available. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions Code-projects Online Hotel Booking version 1.0 Description A cross-site scripting issue exists in the Booking Endpoint component of Code-projects Online Hotel Booking version 1.0. Manipulation of the `roomname` argument in the `/booknow.php` file can lead to cross-site scripting. The attack can be launched remotely and the exploit is publicly available. Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, sanitize the `roomname` input to prevent the injection of malicious scripts.

Name of the Vulnerable Software and Affected Versions code-projects BloodBank Managing System version 1.0 Description A security issue exists in code-projects BloodBank Managing System 1.0. The issue affects an unknown part of the file `/admin state.php`. Manipulation of the `statename` argument can lead to cross-site scripting. The attack can be initiated remotely, and the exploit has been publicly disclosed. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Simple Food Ordering System version 1.0 **Description** A security issue exists in code-projects Simple Food Ordering System version 1.0, specifically within the Database Backup Handler component and the `/food/sql/food.sql` file. The issue allows for remote access to files and directories. The exploit has been publicly disclosed. **Recommendations** Change the configuration settings.

**Name of the Vulnerable Software and Affected Versions** Simple Food Ordering System version 1.0 **Description** A SQL injection issue exists in the Simple Food Ordering System. The issue is located in the `all-tickets.php` file, specifically through manipulation of the `Status` argument. This allows for remote attacks. The exploit is publicly available. **Recommendations** Simple Food Ordering System version 1.0: Address the SQL injection issue in the `all-tickets.php` file by sanitizing the `Status` argument to prevent malicious code execution.

**Name of the Vulnerable Software and Affected Versions** Tecnick TCExam version 16.5.0 **Description** A security issue exists in Tecnick TCExam. The problem is located in an unknown function within the file `/admin/code/tce edit group.php` of the Group Handler component. Manipulating the `Name` argument can lead to cross site scripting. The attack can be initiated remotely. The exploit is publicly available. **Recommendations** Upgrade the affected component to a later release where this issue is addressed.

**Name of the Vulnerable Software and Affected Versions** Worksuite HR, CRM and Project Management versions up to 5.5.25 **Description** A security issue exists in Worksuite HR, CRM and Project Management. The issue involves cross site scripting, triggered by manipulating the `Client Note` argument within an unknown function of the file '/account/orders/create'. This attack can be initiated remotely. The exploit has been publicly disclosed. **Recommendations** Versions prior to 5.5.25 should be updated. As a temporary workaround, consider restricting or disabling access to the file '/account/orders/create' until a patch is available.