CVE-2022-30903: Improper Neutralization of Input During Web Page Generation

Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42" is vulnerable to Cross-Site Scripting XSS via the admin-MaintenanceDevice Management...

CVE-2022-30399

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/admin/?page=maintenance/managecategory&id=...

Money Transfer Management System SQL Injection Vulnerability

A SQL injection vulnerability exists in Money Transfer Management System version 1.0, a money transfer management system. The vulnerability stems from missing validation of external input SQL statements in the id parameter in admin/maintenance/managebranch.php and admin/maintenance/managefee.php...

Sql injection

Money Transfer Management System Version 1.0 allows an unauthenticated user to inject SQL queries in 'admin/maintenance/managebranch.php' and 'admin/maintenance/managefee.php' via the 'id' parameter...

Money Transfer Management System SQL注入漏洞

A SQL injection vulnerability exists in Money Transfer Management System version 1.0, a money transfer management system. The vulnerability stems from missing validation of external input SQL statements in the id parameter in admin/maintenance/managebranch.php and admin/maintenance/managefee.php...

CVE-2022-26267

Piwigo v12.2.0 was discovered to contain an information leak via the action parameter in /admin/maintenanceactions.php...

Cross site request forgery (csrf)

A cross-site request forgery CSRF in /admin/maintenance/ of Domainmod 4.13 allows attackers to arbitrarily delete logs...

CVE-2020-20989: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF in /admin/maintenance/ of Domainmod 4.13 allows attackers to arbitrarily delete logs...

BlogoText 'creer_fichier_zip' function information disclosure vulnerability

BlogoText is a lightweight SQLite blogging engine. An information disclosure vulnerability exists in the 'creerfichierzip' function in the admin/maintenance.php file in BlogoText 3.7.6 and earlier versions. A remote attacker can exploit this vulnerability by providing the name archiv1.zip to brea...