13 matches found
PT-2024-15980
Name of the Vulnerable Software and Affected Versions code-projects Pharmacy Management System version 1.0 Description A critical issue has been discovered, affecting some unknown functionality of the file /php/manage purchase.php?action=search&tag=VOUCHER NUMBER. The manipulation of the text...
CVE-2024-9976: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/managecustomer.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The...
CVE-2018-25077: Inefficient Regular Expression Complexity
A vulnerability was found in melnaron mel-spintax. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lib/spintax.js. The manipulation of the argument text leads to inefficient regular expression complexity. The name of the patch is...
PT-2023-10220 · Unknown · Dovgalyuk Aibattle
Name of the Vulnerable Software and Affected Versions: Dovgalyuk AIBattle affected versions not specified Description: A critical vulnerability has been found in Dovgalyuk AIBattle. The issue affects the sendComments function of the file site/procedures.php. The manipulation of the text argument...
CVE-2015-10041: Improper Neutralization of Special Elements used in an SQL Command
UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical has been found in Dovgalyuk AIBattle. Affected is the function sendComments of the file site/procedures.php. The manipulation of the argument text leads to sql injection. The name of the patch is...
CVE-2020-36637
UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Chris92de AdminServ. It has been declared as problematic. This vulnerability affects unknown code of the file resources/core/adminserv.php. The manipulation of the argument text leads to cross site scripting. The attack can be initiated...
CVE-2020-36637: Improper Neutralization of Input During Web Page Generation
UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Chris92de AdminServ. It has been declared as problematic. This vulnerability affects unknown code of the file resources/core/adminserv.php. The manipulation of the argument text leads to cross site scripting. The attack can be initiated...
PT-2022-8066 · Pypi · Yolapi
Name of the Vulnerable Software and Affected Versions: yolapi affected versions not specified Description: A problematic vulnerability was found in yolapi, affecting the render description function of the file yolapi/pypi/metadata.py. The manipulation of the text argument leads to cross-site...
PT-2022-7989
Name of the Vulnerable Software and Affected Versions Bitrix Site Manager version 12.06.2015 Description A problematic vulnerability was found in the Contact Form component of Bitrix Site Manager. The issue arises from the manipulation of the text argument with a malicious input, such as , leadin...
CVE-2017-20122: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
A vulnerability classified as problematic was found in Bitrix Site Manager 12.06.2015. Affected by this vulnerability is an unknown functionality of the component Contact Form. The manipulation of the argument text with the input leads to basic cross site scripting. The attack can be launched...
PYSEC-2019-122
Sqlayamlfixtures 0.9.1 allows local users to execute arbitrary python code via the fixturetext argument in sqlayamlfixtures.load...
PT-2019-16623
Name of the Vulnerable Software and Affected Versions Sqla yaml fixtures versions up to 0.9.1 Description The issue allows local users to execute arbitrary python code via the fixture text argument in the sqla yaml fixtures.load function. This can lead to code execution with the privileges of the...