Mymy

**Name of the Vulnerable Software and Affected Versions** code-projects Project Management System version 1.0 **Description** Cross site scripting (XSS) occurs in the Mail Compose Page component within the `/mail.php` endpoint. This issue allows a remote attacker to execute malicious scripts through the manipulation of unknown code in the specified file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Project Management System version 1.0 **Description** A SQL injection issue exists within the Login component in the `chk.php` file. This flaw allows a remote attacker to manipulate an unknown function to execute arbitrary SQL commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Online Hospital Management System version 1.0 **Description** An issue in the Registration Handler component allows remote attackers to achieve improper authorization by manipulating the `Username` argument within an unknown function. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Inventory Management System version 1.0 **Description** A SQL injection flaw exists in the Login component of the software. A remote attacker can exploit this by manipulating the `Username` argument, which allows for the execution of arbitrary SQL commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions Easy Blog Site version 1.0 Description A security issue exists in Easy Blog Site 1.0 related to the login functionality within the `login.php` file. Manipulation of the `username` and `password` arguments can lead to SQL injection. The attack can be initiated remotely, and a public exploit is available. Recommendations Disable the login functionality in `login.php` until a fix is available.