CVE-2024-34469: Improper Neutralization of Input During Web Page Generation

Rukovoditel before 3.5.3 allows XSS via userphoto to index.php?module=users/registration&action=save...

CVE-2024-34401

Savsoft Quiz 6.0 allows stored XSS via the index.php/quiz/insertquiz/ quizname parameter...

CVE-2024-34453

TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=readdata&type=connectivitytest which reaches /system/api.php...

CVE-2024-34401

Savsoft Quiz 6.0 allows stored XSS via the index.php/quiz/insertquiz/ quizname parameter...

CVE-2024-34453: Server-Side Request Forgery (SSRF)

TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=readdata&type=connectivitytest which reaches /system/api.php...

CVE-2024-34401: Improper Neutralization of Input During Web Page Generation

Savsoft Quiz 6.0 allows stored XSS via the index.php/quiz/insertquiz/ quizname parameter...

CVE-2024-33832

OneNav v0.9.35-20240318 was discovered to contain a Server-Side Request Forgery SSRF via the component /index.php?c=api&method=getlinkinfo...

CVE-2024-33832

OneNav v0.9.35-20240318 was discovered to contain a Server-Side Request Forgery SSRF via the component /index.php?c=api&method=getlinkinfo...

CVE-2024-33832: Server-Side Request Forgery (SSRF)

OneNav v0.9.35-20240318 was discovered to contain a Server-Side Request Forgery SSRF via the component /index.php?c=api&method=getlinkinfo...

CVE-2024-33832

OneNav v0.9.35-20240318 was discovered to contain a Server-Side Request Forgery SSRF via the component /index.php?c=api&method=getlinkinfo...

PT-2024-30019

Name of the Vulnerable Software and Affected Versions Savsoft Quiz version 6.0 Description A issue was found in the Category Page component, specifically in the /public/index.php/Qbank/editCategory file. The manipulation of the category name argument with malicious input, such as alert'XSS', can...

CVE-2024-32236

An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php component...

CVE-2024-32236

The CmsEasy content management system (CMS), developed by Jiuzhou ET Technology, is vulnerable in versions v.7.7 and before . A remote attacker can obtain sensitive information by exploiting a flaw in the update function located within the index.php component. To remediate this issue, users are r...

PT-2024-24468 · Cmseasy · Cmseasy

Name of the Vulnerable Software and Affected Versions: CmsEasy versions 7.7 and earlier Description: The issue allows a remote attacker to obtain sensitive information via the update function in the "index.php" component. Recommendations: For CmsEasy versions 7.7 and earlier, update to a version...

CVE-2024-32236

An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php component...

CVE-2024-32236: Insecure Storage of Sensitive Information

An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php component...

CVE-2024-32206

A stored cross-site scripting XSS vulnerability in the component \affiche\admin\index.php of WUZHICMS v4.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $formdata parameter...

CVE-2024-32206

A stored cross-site scripting XSS vulnerability in the component \affiche\admin\index.php of WUZHICMS v4.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $formdata parameter...

CVE-2024-3535 Campcodes Church Management System index.php sql injection

A vulnerability, which was classified as critical, was found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-3526

A vulnerability has been found in Campcodes Online Event Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument msg leads to cross site scripting. The attack can be launched remotely...