Xuyue

**Name of the Vulnerable Software and Affected Versions** code-projects Real State Services version 1.0 **Description** An issue exists in the `/builderHome.php` file where improper handling of the `loc` variable allows for remote SQL injection. SQL injection is a technique where an attacker inserts malicious SQL code into a query, potentially allowing them to manipulate the database. **Recommendations** Update code-projects Real State Services version 1.0 to a patched version. As a temporary workaround, restrict access to the `/builderHome.php` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** code-projects Real State Services version 1.0 **Description** Remote SQL injection is possible due to improper processing of the `Bankname` variable within the '/pay.php' endpoint. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Real State Services version 1.0 **Description** A remote SQL injection exists in the `/normalHomeSale.php` file. The issue occurs when the `loc` argument is manipulated, allowing an attacker to execute arbitrary SQL commands on the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `loc` argument in the `/normalHomeSale.php` endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** code-projects Real State Services version 1.0 **Description** A security flaw allows remote attackers to perform SQL injection, a technique used to interfere with the queries that an application makes to its database. This issue occurs within the `/normalHomeRent.php` file when the `loc` argument is manipulated. **Recommendations** As a temporary workaround, restrict access to the `/normalHomeRent.php` file or avoid using the `loc` argument until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Real State Services version 1.0 **Description** An issue exists in the `/single-list rent.php` file where manipulating the `ID` argument allows for remote SQL injection. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Real State Services version 1.0 **Description** A remote SQL injection exists in the `/addprojectrent.php` file. The issue occurs when the `amen` variable is manipulated, allowing an attacker to execute arbitrary SQL commands on the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the `/addprojectrent.php` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** code-projects Real State Services version 1.0 **Description** An issue exists in the `/addprojectsale.php` endpoint where the manipulation of the `amen` variable allows for SQL injection. This allows a remote attacker to interfere with the database queries. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Real State Services version 1.0 **Description** An issue exists in the `/single-list sale.php?action=add` endpoint where manipulation of the `ID` parameter allows for remote SQL injection. SQL injection is a technique where an attacker inserts malicious SQL code into a query, potentially allowing them to read, modify, or delete data from the database. **Recommendations** Update Real State Services to a version newer than 1.0. As a temporary mitigation, restrict access to the `/single-list sale.php?action=add` endpoint or avoid using the `ID` parameter until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** code-projects Real State Services version 1.0 **Description** Remote SQL injection is possible within the Login component due to improper handling of the `Username` argument in the `/loginuser.php` endpoint. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. **Recommendations** Update code-projects Real State Services version 1.0 to a patched version. As a temporary mitigation, restrict access to the `/loginuser.php` endpoint or avoid using the `Username` parameter until a fix is applied.

**Name of the Vulnerable Software and Affected Versions** CodeAstro Online Job Portal version 1.0 **Description** An issue exists in the `/users/application status.php` file where manipulating the `ID` argument allows for remote SQL injection. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. **Recommendations** Update CodeAstro Online Job Portal version 1.0 to a version that contains a fix for this issue. As a temporary mitigation, restrict access to the `/users/application status.php` endpoint or avoid using the `ID` parameter until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** CodeAstro Online Job Portal version 1.0 **Description** An issue exists in the `/admin/jobs-admins/delete-jobs.php` file where manipulating the `ID` argument allows for remote SQL injection. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database. **Recommendations** Restrict access to the `/admin/jobs-admins/delete-jobs.php` file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Simple Food Order System version 1.0 **Description** A security flaw exists in code-projects Simple Food Order System version 1.0. The issue resides in the Parameter Handler component, specifically within the file `/all-tickets.php`. Manipulation of the `Status` argument can lead to SQL injection. This attack can be initiated remotely. The exploit has been publicly released. **Recommendations** Apply any available updates or patches for code-projects Simple Food Order System version 1.0. As a temporary workaround, restrict access to the `/all-tickets.php` file. Sanitize the `Status` parameter before using it in any database queries.

**Name of the Vulnerable Software and Affected Versions** Simple Food Order System version 1.0 **Description** A flaw exists in Simple Food Order System 1.0 related to the handling of parameters. Specifically, manipulating the `Name` argument can lead to SQL injection. This issue affects an unknown function within the `register-router.php` file of the Parameter Handler component and can be exploited remotely. The exploit code is publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Simple Food Order System version 1.0 **Description** A security issue exists in code-projects Simple Food Order System version 1.0 related to SQL injection. The issue is located in the `all-orders.php` file within the Parameter Handler component. Manipulation of the `Status` parameter can lead to a successful SQL injection attack. The attack can be initiated remotely, and details of the exploit have been publicly disclosed. **Recommendations** Apply a fix to address the SQL injection issue in the `all-orders.php` file, specifically related to the `Status` parameter.

**Name of the Vulnerable Software and Affected Versions** code-projects Simple Food Order System version 1.0 **Description** A flaw exists in code-projects Simple Food Order System 1.0 that allows for SQL injection. This issue is located in an unknown functionality within the `/routers/add-item.php` file. Manipulation of the `price` argument can lead to successful exploitation. The attack can be initiated remotely, and a public exploit is available. **Recommendations** Apply a fix or patch for code-projects Simple Food Order System version 1.0 to address the SQL injection issue in the `/routers/add-item.php` file.

**Name of the Vulnerable Software and Affected Versions** Simple Flight Ticket Booking System version 1.0 **Description** A SQL injection issue exists in Simple Flight Ticket Booking System version 1.0. The issue is located in the `SearchResultOneway.php` file and involves manipulation of the `from` argument. This allows for remote attacks. The exploit for this issue has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Simple Flight Ticket Booking System version 1.0 **Description** A flaw exists in Simple Flight Ticket Booking System version 1.0, specifically within the SearchResultRoundtrip.php file. Manipulation of input provided to the application through the `results` argument can lead to SQL injection. This issue can be exploited remotely. The exploit for this issue has been publicly released. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Online Reviewer System version 1.0 **Description** A security flaw exists in code-projects Online Reviewer System 1.0. The issue involves a SQL injection resulting from manipulation of the `ID` argument within an unknown function of the file `/reviewer/system/system/admins/manage/users/user-delete.php`. The attack can be initiated remotely. The exploit has been released publicly. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Social Networking Site version 1.0 **Description** A security flaw exists in code-projects Social Networking Site 1.0. The issue is related to SQL injection in an unknown function within the /delete post.php file. Manipulating the `ID` argument can trigger the injection. This can be initiated remotely. The exploit has been publicly released. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.