Jiucai

Name of the Vulnerable Software and Affected Versions: code-projects Medical Store Management System version 1.0 Description: A SQL injection issue exists in code-projects Medical Store Management System 1.0. Manipulation of the `newPassTxt` argument in an unknown function within the `ChangePassword.java` file can lead to SQL injection. The attack can be executed remotely and the exploit has been publicly disclosed and may be used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: code-projects Medical Store Management System version 1.0 Description: A vulnerability exists in the Medical Store Management System due to a SQL injection issue. The vulnerability is related to unknown processing of the `UpdateCompany.java` file within the Update Company Page component. Manipulation of the `companyNameTxt` argument can lead to SQL injection, and the attack can be initiated remotely. The exploit has been publicly disclosed. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: code-projects Hostel Management System version 1.0 Description: A vulnerability exists in an unknown functionality of the `hostel manage.exe` file within the Login Form component. Manipulation of the `uname` argument results in a stack-based buffer overflow. Local access is required for exploitation. The exploit for this issue has been publicly disclosed. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Hostel Management System version 1.0 Description: A vulnerability exists in the Login component of Hostel Management System 1.0, specifically within the `hostel manage.exe` file. This issue results in improper authentication and allows for local host exploitation. The exploit for this issue has been publicly disclosed. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: code-projects Medical Store Management System version 1.0 Description: A vulnerability has been found in code-projects Medical Store Management System 1.0. This vulnerability affects unknown code of the file MainPanel.java. The manipulation of the argument `searchTxt` leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: code-projects Medical Store Management System version 1.0 Description: A vulnerability was identified in code-projects Medical Store Management System 1.0, affecting an unknown part of the file `UpdateMedicines.java` within the Update Medicines Page component. The manipulation of the argument `productNameTxt` leads to SQL injection. The attack can be initiated remotely, and the exploit has been disclosed to the public. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Intern Membership Management System version 1.0 **Description** A critical vulnerability exists in code-projects Intern Membership Management System 1.0. The vulnerability is located in an unknown function within the `/admin/edit admin query.php` file. Manipulation of the `Username` argument results in a SQL injection. The attack can be executed remotely, and the exploit has been publicly disclosed and may be used. **Recommendations** code-projects Intern Membership Management System version 1.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Intern Membership Management System version 1.0 **Description** A critical vulnerability exists in code-projects Intern Membership Management System 1.0. The vulnerability affects unknown code within the `/admin/edit student query.php` file. Manipulation of the `ID` argument results in a SQL injection. The attack can be initiated remotely, and the exploit has been publicly disclosed and may be utilized. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Intern Membership Management System version 1.0 **Description** A critical issue exists in code-projects Intern Membership Management System 1.0 related to the processing of the `/admin/delete student.php` API endpoint. Manipulation of the `ID` parameter can lead to SQL injection. The exploit is publicly available and may be used to initiate attacks remotely. **Recommendations** As a temporary workaround, consider restricting access to the `/admin/delete student.php` endpoint until a fix is available. Sanitize the `ID` parameter before using it in any database queries.