Firepunch

**Name of the Vulnerable Software and Affected Versions** Fighting Cock Information System version 1.0 **Description** A critical issue has been found in the processing of the file admin/action/update mother.php, where the manipulation of the `age mother` argument leads to sql injection. The attack can be initiated remotely. **Recommendations** For Fighting Cock Information System version 1.0, consider restricting access to the `admin/action/update mother.php` file until a patch is available. As a temporary workaround, avoid using the `age mother` argument in the affected file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Fighting Cock Information System version 1.0 **Description** A critical issue was found in the Fighting Cock Information System, affecting an unknown function of the file admin/pages/tables/add con.php. The manipulation of the `id` argument leads to SQL injection. It is possible to launch the attack remotely. **Recommendations** For Fighting Cock Information System version 1.0, consider disabling the `id` argument in the affected file admin/pages/tables/add con.php as a temporary workaround until a patch is available. Restrict access to the vulnerable file to minimize the risk of exploitation. Avoid using the `id` argument in the affected area until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** code-projects Fighting Cock Information System version 1.0 **Description** A critical issue has been found in the system, affecting an unknown functionality of the file /admin/action/add con.php. The manipulation of the `chicken` argument leads to sql injection. This issue can be exploited remotely. **Recommendations** For code-projects Fighting Cock Information System version 1.0, as a temporary workaround, consider restricting access to the /admin/action/add con.php file until a patch is available. Avoid using the `chicken` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** code-projects Fighting Cock Information System version 1.0 **Description** A critical issue was found in the system, affecting some unknown functionality of the file /admin/action/delete-vaccine.php. The manipulation of the `ref` argument leads to SQL injection. The attack can be launched remotely. **Recommendations** For code-projects Fighting Cock Information System version 1.0, as a temporary workaround, consider restricting access to the /admin/action/delete-vaccine.php file until a patch is available. Avoid using the `ref` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** code-projects Fighting Cock Information System version 1.0 Windows Event Log (affected versions not specified) **Description** A critical issue has been identified, allowing for SQL injection through the manipulation of the `type feed` argument in the `/admin/action/new-feed.php` file. This can be initiated remotely. The issue affects an unknown part of the file and has been publicly disclosed, potentially allowing for exploitation. Additionally, a flaw in Windows Event Log could let attackers disrupt security systems, although it does not directly take over the system. **Recommendations** For code-projects Fighting Cock Information System version 1.0, consider restricting access to the `/admin/action/new-feed.php` file and avoid using the `type feed` argument until a fix is available. For Windows Event Log, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** code-projects Fighting Cock Information System version 1.0 **Description** A critical issue has been identified, affecting the /admin/action/edit chicken.php file. The manipulation of the `ref` argument leads to SQL injection. This issue can be exploited remotely. **Recommendations** For code-projects Fighting Cock Information System version 1.0, consider restricting access to the /admin/action/edit chicken.php file until a fix is available. As a temporary workaround, avoid using the `ref` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** code-projects Dormitory Management System version 1.0 **Description** A critical issue has been found in the Dormitory Management System, affecting some unknown functionality of the file modifyuser.php. The manipulation of the `user id` argument leads to sql injection. The attack may be launched remotely. **Recommendations** For version 1.0, consider disabling the modifyuser.php file or restricting access to it until a patch is available. Avoid using the `user id` argument in the affected functionality to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** code-projects Human Resource Integrated System version 1.0 **Description** A critical issue was found in the system, affecting some unknown functionality of the file update personal info.php. The manipulation of the `sex` argument leads to SQL injection. The attack can be launched remotely. **Recommendations** For code-projects Human Resource Integrated System version 1.0, consider restricting access to the update personal info.php file until a patch is available. As a temporary workaround, avoid using the `sex` argument in the affected functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** code-projects Fighting Cock Information System version 1.0 **Description** A critical issue affects the processing of the file /admin/pages/edit chicken.php, where the manipulation of the `id` argument leads to sql injection. The attack can be initiated remotely. **Recommendations** For code-projects Fighting Cock Information System version 1.0, consider restricting access to the /admin/pages/edit chicken.php file until a patch is available. As a temporary workaround, avoid using the `id` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Fighting Cock Information System version 1.0 **Description** A critical issue has been found in the code-projects Fighting Cock Information System, affecting unknown code of the file /admin/action/update-deworm.php. The manipulation of the `usage deworm` argument leads to SQL injection. The attack can be initiated remotely. **Recommendations** For version 1.0, consider disabling the `/admin/action/update-deworm.php` file or restricting access to it until a patch is available. Avoid using the `usage deworm` argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** code-projects Human Resource Integrated System version 1.0 **Description** A critical issue has been found in the system, affecting an unknown part of the file /admin route/inc service credits.php. The manipulation of the `id` argument leads to SQL injection. It is possible to initiate the attack remotely. **Recommendations** For code-projects Human Resource Integrated System version 1.0, consider restricting access to the /admin route/inc service credits.php file until a patch is available. As a temporary workaround, avoid using the `id` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** code-projects Human Resource Integrated System version 1.0 **Description** A critical issue has been identified, affecting the file /admin route/dec service credits.php. The manipulation of the `date` argument leads to SQL injection. This issue can be exploited remotely. **Recommendations** For code-projects Human Resource Integrated System version 1.0, consider restricting access to the /admin route/dec service credits.php file until a patch is available. As a temporary workaround, avoid using the `date` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** code-projects Dormitory Management System version 1.0 **Description** A vulnerability was found in the code-projects Dormitory Management System, affecting some unknown processing of the file modifyuser.php. The manipulation of the argument `mname` leads to information disclosure. The exploit has been disclosed to the public and may be used. **Recommendations** For code-projects Dormitory Management System version 1.0, consider restricting access to the `modifyuser.php` file until a patch is available. As a temporary workaround, avoid using the `mname` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Dormitory Management System version 1.0 **Description** A critical vulnerability has been found in the code-projects Dormitory Management System. The issue is related to an unknown function of the file comment.php, where the manipulation of the `com` argument leads to SQL injection. This allows for remote attacks. **Recommendations** For version 1.0, consider disabling the affected function in comment.php until a patch is available. Restrict access to the comment.php file to minimize the risk of exploitation. Avoid using the `com` argument in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Dormitory Management System version 1.0 **Description** A critical vulnerability was found in the Dormitory Management System. The issue affects an unknown functionality of the file login.php. The manipulation of the `username` argument leads to SQL injection. The attack can be launched remotely. **Recommendations** For version 1.0, consider disabling the login functionality temporarily to prevent exploitation until a patch is available. Restrict access to the login.php file to minimize the risk of SQL injection attacks. Avoid using the `username` argument in the affected functionality until the issue is resolved.