Lucene search
K

7 matches found

Packet Storm
Packet Storm
added 2024/03/12 12:0 a.m.269 views

Human Resource Management System 1.0 SQL Injection

Exploit Title: Human Resource Management System - SQL Injection Date: 13-01-2024 Exploit Author: Srikar Exp1o1t9r Vendor Homepage: https://www.sourcecodester.com/php/15740/human-resource-management-system-project-php-and-mysql-free-source-code.html Software Link:...

7.4AI score
Exploits0
OSV
OSV
added 2024/03/06 11:8 a.m.18 views

BIT-TYPO3-2022-36107

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the FileDumpController backend and frontend context is vulnerable to cross-site scripting when malicious files are displayed using this component. A valid backend user account i...

6.5CVSS5.7AI score0.00687EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2023/11/30 12:0 a.m.58 views

MariaDB DoS Vulnerability (CVE-2023-22084) - Windows

MariaDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...

4.9CVSS6.3AI score0.06984EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/12/14 12:0 a.m.16 views

TYPO3 Sensitive Information Disclosure Vulnerability (TYPO3-CORE-SA-2022-016)

TYPO3 is prone to a sensitive information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3";...

5.7CVSS5.5AI score0.00385EPSS
Exploits0References2
NVD
NVD
added 2022/09/13 6:15 p.m.9 views

CVE-2022-36108

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the f:asset.css view helper is vulnerable to cross-site scripting when user input is passed as variables to the CSS. Update to TYPO3 version 10.4.32 or 11.5.16 that fix the...

6.5CVSS0.00687EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/09/13 12:0 a.m.2 views

PT-2022-23197 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 7.6.58 ELTS TYPO3 versions prior to 8.7.48 ELTS TYPO3 versions prior to 9.5.37 ELTS TYPO3 versions prior to 10.4.32 TYPO3 versions prior to 11.5.16 Description: The FileDumpController component in TYPO3 is vulnerable t...

6.5CVSS5.2AI score0.00687EPSS
Exploits0References14
Positive Technologies
Positive Technologies
added 2022/09/13 12:0 a.m.1 views

PT-2022-23198 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 10.4.32 TYPO3 versions prior to 11.5.16 Description: The f:asset.css view helper in TYPO3 is vulnerable to cross-site scripting when user input is passed as variables to the CSS. Recommendations: Update to TYPO3 versio...

6.5CVSS5.9AI score0.00687EPSS
Exploits0References13
Rows per page
Query Builder