# CVEs published 2024-10-19

24 CVEs were published on October 19, 2024: 0 critical, 2 high. Days are UTC.

- [CVE-2024-10159](https://cve.now/CVE-2024-10159.md): PHPGurukul Boat Booking System My Profile Page profile.php sql injection (CVSS 6.9, PHPGurukul Boat Booking System)
- [CVE-2024-10158](https://cve.now/CVE-2024-10158.md): PHPGurukul Boat Booking System session\_start session fixiation (CVSS 6.9, PHPGurukul Boat Booking System)
- [CVE-2024-10157](https://cve.now/CVE-2024-10157.md): PHPGurukul Boat Booking System Reset Your Password Page password-recovery.php sql injection (CVSS 6.9, PHPGurukul Boat Booking System)
- [CVE-2024-10156](https://cve.now/CVE-2024-10156.md): PHPGurukul Boat Booking System Sign In Page index.php sql injection (CVSS 6.9, PHPGurukul Boat Booking System)
- [CVE-2024-10155](https://cve.now/CVE-2024-10155.md): PHPGurukul Boat Booking System Book a Boat Page book-boat.php cross site scripting (CVSS 5.3, PHPGurukul Boat Booking System)
- [CVE-2024-10154](https://cve.now/CVE-2024-10154.md): PHPGurukul Boat Booking System Check Booking Status Page status.php sql injection (CVSS 5.3, PHPGurukul Boat Booking System)
- [CVE-2024-10153](https://cve.now/CVE-2024-10153.md): PHPGurukul Boat Booking System Book a Boat Page book-boat.php sql injection (CVSS 5.3, PHPGurukul Boat Booking System)
- [CVE-2024-10142](https://cve.now/CVE-2024-10142.md): code-projects Blood Bank System viewrequest.php cross site scripting (CVSS 5.3, code-projects Blood Bank System)
- [CVE-2024-10141](https://cve.now/CVE-2024-10141.md): jsbroks COCO Annotator Session predictable state (CVSS 6.3, jsbroks COCO Annotator)
- [CVE-2024-10140](https://cve.now/CVE-2024-10140.md): code-projects Pharmacy Management System manage\_supplier.php sql injection (CVSS 5.3, code-projects Pharmacy Management System)
- [CVE-2024-10139](https://cve.now/CVE-2024-10139.md): code-projects Pharmacy Management System add\_new\_supplier.php sql injection (CVSS 5.3, code-projects Pharmacy Management System)
- [CVE-2024-10138](https://cve.now/CVE-2024-10138.md): code-projects Pharmacy Management System add\_new\_purchase.php sql injection (CVSS 5.3, code-projects Pharmacy Management System)
- [CVE-2024-10137](https://cve.now/CVE-2024-10137.md): code-projects Pharmacy Management System manage\_medicine.php sql injection (CVSS 5.3, code-projects Pharmacy Management System)
- [CVE-2024-10136](https://cve.now/CVE-2024-10136.md): code-projects Pharmacy Management System manage\_invoice.php sql injection (CVSS 5.3, code-projects Pharmacy Management System)
- [CVE-2024-10135](https://cve.now/CVE-2024-10135.md): ESAFENET CDG NetSecConfigService.java actionDelNetSecConfig sql injection (CVSS 5.3, ESAFENET CDG)
- [CVE-2024-10134](https://cve.now/CVE-2024-10134.md): ESAFENET CDG MultiServerAjax.java connectLogout sql injection (CVSS 5.3, ESAFENET CDG)
- [CVE-2024-9897](https://cve.now/CVE-2024-9897.md): StreamWeasels Twitch Integration \<= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via sw-twitch-embed Shortcode (CVSS 6.4, StreamWeasels Twitch Integration)
- [CVE-2024-10133](https://cve.now/CVE-2024-10133.md): ESAFENET CDG NetSecPolicyAjax.java updateNetSecPolicyPriority sql injection (CVSS 5.3, ESAFENET CDG)
- [CVE-2024-9889](https://cve.now/CVE-2024-9889.md): ElementInvader Addons for Elementor \<= 1.2.9 - Authenticated (Contributor+) Information Exposure (CVSS 4.3, ElementInvader Addons for Elementor)
- [CVE-2023-6243](https://cve.now/CVE-2023-6243.md): EventON PRO - WordPress Virtual Event Calendar Plugin \<= 4.6.8 - Cross-Site Request Forgery via admin\_test\_email (CVSS 4.3, EventON (Pro) - WordPress Virtual Event Calendar Plugin)
- [CVE-2024-21536](https://cve.now/CVE-2024-21536.md): Versions of the package http-proxy-middleware before 2.0.7, from 3.0.0 and before 3.0.3 are vulnerable to Denial of Service (DoS) due to an (CVSS 8.7, http-proxy-middleware · org.webjars.npm:http-proxy-middlewa…)
- [CVE-2024-10131](https://cve.now/CVE-2024-10131.md): Remote Code Execution in infiniflow/ragflow (CVSS 8.8, infiniflow/ragflow)
- [CVE-2019-25218](https://cve.now/CVE-2019-25218.md): Photo Gallery Slideshow & Masonry Tiled Gallery \<= 1.0.3 - Authenticated (Admin+) SQL Injection (CVSS 4.9, nik00726 Photo Gallery Slideshow & Masonry Tiled Gallery)
- [CVE-2024-9219](https://cve.now/CVE-2024-9219.md): WordPress Social Share Buttons \<= 1.19 - Reflected Cross-Site Scripting (CVSS 6.1, maxfoundry Social Share Buttons)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-10-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.