Xbjds

A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected is the function mysqli query of the file doedit.php of the component Registration-Edit Handler. This manipulation of the argument id/name/title/year/gender/fromdate/todate/people causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unknown functionality of the file dodelete.php of the component Registration-Delete Handler. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.

A security flaw has been discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this issue is some unknown functionality. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet.

A weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. This affects an unknown part of the file project.sql. Executing a manipulation can lead to files or directories accessible. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.

**Name of the Vulnerable Software and Affected Versions** kishor-23 food-waste-management-system (affected versions not specified) **Description** A remote SQL injection is possible due to the manipulation of the `location` argument within an unknown function in the `admin/donate.php` file. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `admin/donate.php` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** kishor-23 food-waste-management-system (affected versions not specified) **Description** An authorization bypass exists in the Role Attribute Handler component within the 'admin/admin.php' file. A remote attacker can exploit this by manipulating the `Name` argument. This issue affects multiple endpoints. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** kishor-23 food-waste-management-system (affected versions not specified) **Description** An issue exists in the Order Assignment Block component within the `admin/admin.php` file. Remote manipulation of the `order id` or `delivery person id` arguments can lead to SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `admin/admin.php` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** kishor-23 food-waste-management-system (affected versions not specified) **Description** A security flaw exists in the Take Order Handler component within the file `delivery/delivery.php`. The issue allows for remote SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution, by manipulating the `order id` or `delivery person id` arguments. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `delivery/delivery.php` file or avoid using the `order id` and `delivery person id` parameters until a patch is available.

**Name of the Vulnerable Software and Affected Versions** kishor-23 food-waste-management-system (affected versions not specified) **Description** A weakness in the Admin Signup component allows remote attackers to bypass authentication. This occurs through the manipulation of the `sign` argument within the `admin/signup.php` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `admin/signup.php` file to minimize the risk of exploitation.