13 matches found
CVE-2024-12950
A vulnerability was found in code-projects/projectworlds Travel Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /subcat.php. The manipulation of the argument catid leads to sql injection. The attack may be initiated remotely. The exploi...
CVE-2024-12950
A vulnerability was found in code-projects/projectworlds Travel Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /subcat.php. The manipulation of the argument catid leads to sql injection. The attack may be initiated remotely. The exploi...
CVE-2024-12950 code-projects/projectworlds Travel Management System subcat.php sql injection
A vulnerability was found in code-projects/projectworlds Travel Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /subcat.php. The manipulation of the argument catid leads to sql injection. The attack may be initiated remotely. The exploi...
CVE-2024-12950
The CVE-2024-12950 entry concerns code-projects/projectworlds Travel Management System v1.0, where the parameter catid in /subcat.php allows SQL injection. The root cause is improper handling/manipulation of the catid argument, leading to a remote, unauthenticated injection with potential impact ...
CVE-2024-12950 code-projects/projectworlds Travel Management System subcat.php sql injection
A vulnerability was found in code-projects/projectworlds Travel Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /subcat.php. The manipulation of the argument catid leads to sql injection. The attack may be initiated remotely. The exploi...
CVE-2020-12950
CVE-2020-12950 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
TeamPass <= 2.1.27.36 Multiple XSS Vulnerabilities
TeamPass is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2019-12950
CVE-2019-12950 affects TeamPass 2.1.27.35. The issue is a Cross-site Scripting (XSS) vulnerability in the sources/items.queries.php "Import items" feature, where loading a crafted CSV file can carry an XSS payload. Root cause: parsing a manipulated CSV leads to client-side script execution. Explo...
CVE-2017-12950
The CVE-2017-12950 entry concerns libgig 4.0.0: the gig::Region::Region function in gig.cpp is vulnerable to a crafted gig file, allowing remote attackers to trigger a denial of service via a NULL pointer dereference and application crash. Public references concur on a DoS impact, with CVSS infor...
Fedora Update for moodle FEDORA-2013-12950
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Core 12 FEDORA-2009-12950 (gtk2)
The remote host is missing an update to gtk2 announced via advisory FEDORA-2009-12950. OpenVAS Vulnerability Test $Id: fcore200912950.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12950 gtk2 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...
Fedora Core 12 FEDORA-2009-12950 (gtk2)
The remote host is missing an update to gtk2 announced via advisory FEDORA-2009-12950. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...