Simple Online Hotel Reservation System Code Issue Vulnerability

Simple Online Hotel Reservation System is a simple online hotel reservation system. Simple Online Hotel Reservation System has a code issue vulnerability that stems from a lack of valid validation of uploaded files by the Photo Handler component in file /admin/editroom.php. An attacker can use th...

CVE-2025-55155

Mantis Bug Tracker MantisBT is an open source issue tracker. In versions 2.27.1 and below, when a user edits their profile to change their e-mail address, the system saves it without validating that it actually belongs to the user. This could result in storing an invalid email address, preventing...

CVE-2025-55155 MantisBT: Authentication bypass for some passwords due to PHP type juggling

Mantis Bug Tracker MantisBT is an open source issue tracker. In versions 2.27.1 and below, when a user edits their profile to change their e-mail address, the system saves it without validating that it actually belongs to the user. This could result in storing an invalid email address, preventing...

CVE-2025-48076 Galette is vulnerable to Cross-site Scripting

Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user to edit a group name and insert an XSS payload. This issue is fixed in version 1.2.0...

CVE-2025-48076 Galette is vulnerable to Cross-site Scripting

Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user to edit a group name and insert an XSS payload. This issue is fixed in version 1.2.0...

CVE-2025-48076 Galette is vulnerable to Cross-site Scripting

Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user to edit a group name and insert an XSS payload. This issue is fixed in version 1.2.0...

foreman: OS command injection via ct_location and fcct_location parameters

A flaw was found in Red Hat Satellite Foreman component. This vulnerability allows an authenticated user with editsettings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting...

CVE-2025-63448

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /editproduct.php?id=1...

PT-2025-45044

Name of the Vulnerable Software and Affected Versions Galette versions 1.1.5.2 and below Description Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user to edit a group name and insert a Cross-site Scripting XSS payload. This...

CVE-2025-55155: Insertion of Sensitive Information Into Sent Data

Mantis Bug Tracker MantisBT is an open source issue tracker. In versions 2.27.1 and below, when a user edits their profile to change their e-mail address, the system saves it without validating that it actually belongs to the user. This could result in storing an invalid email address, preventing...

Galette security vulnerabilities

Galette is a Galette open source membership management web application for non-profit organizations. A security vulnerability exists in Galette version 1.1.5.2 and earlier, which stems from a vulnerability that allows users to edit group names and insert XSS payloads, potentially leading to...

EUVD-2025-37499

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /editproduct.php?id=1...

CVE-2025-63448

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /editproduct.php?id=1...

CVE-2025-63448

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /editproduct.php?id=1...

CVE-2025-12593

A vulnerability was identified in code-projects Simple Online Hotel Reservation System 2.0. The impacted element is an unknown function of the file /admin/editroom.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely...

CVE-2025-63448

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /editproduct.php?id=1...

Water-Management-System security vulnerabilities

Water-Management-System is an inventory management system by the individual developer Dikshant Naik. A security vulnerability exists in Water-Management-System version 1.0, which originates from cross-site scripting in the file /editproduct.php?id=1...

CVE-2025-63448

Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /editproduct.php?id=1...

PT-2025-44775

Name of the Vulnerable Software and Affected Versions Water Management System version 1.0 Description The Water Management System version 1.0 is susceptible to Cross Site Scripting XSS. The issue occurs in the /edit product.php?id=1 API endpoint. The id parameter is potentially vulnerable. XSS...

CVE-2025-63448

Water Management System v1.0 is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The vulnerability specifically affects the /edit_product.php?id=1 endpoint, where the id parameter is susceptible to malicious script injection. If exploite...