6010 matches found
CVE-2022-30838
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=updateapplicationstatus...
CVE-2022-30842
Covid-19 Travel Pass Management System v1.0 is vulnerable to Cross Site Scripting XSS via /ctpms/classes/Users.php?f=save, firstname...
Cross site scripting
Covid-19 Travel Pass Management System v1.0 is vulnerable to Cross Site Scripting XSS via /ctpms/classes/Users.php?f=save, firstname...
Sql injection
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=updateapplicationstatus...
CVE-2022-30838
CVE-2022-30838 affects Covid-19 Travel Pass Management System v1.0. The vulnerability is an SQL Injection in Master.php?f=update_application_status, caused by input not being validated before SQL statements are constructed. Exploitation could allow an attacker to retrieve or modify database data....
CVE-2022-30838
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=updateapplicationstatus...
CVE-2022-30842
CVE-2022-30842 affects the Covid-19 Travel Pass Management System v1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable via /ctpms/classes/Users.php?f=save, firstname, caused by lack of input/output data validation and insufficient filtering of user-supplied data. This can allo...
CVE-2022-30842
Covid-19 Travel Pass Management System v1.0 is vulnerable to Cross Site Scripting XSS via /ctpms/classes/Users.php?f=save, firstname...
CVE-2022-1802
creationtimestamp| type| source ---|---|--- 2022-05-23 19:23:12+00:00| seen| https://t.me/itsecnews/700 2022-05-25 15:17:02+00:00| seen| https://t.me/truesecator/2979 2022-05-26 11:12:35+00:00| seen| https://t.me/thehackernews/2223 2022-05-26 13:32:59+00:00| seen| https://t.me/haccking/7959...
A week in security (May 16 – 22)
Last week on Malwarebytes Labs: Fake reCAPTCHA forms dupe users via compromised WordPress sites How COVID-19 fuelled a surge in malware Why MRG-Effitas matters to SMBs “Look what I found here” phish targets Facebook users AirTag stalking: What is it, and how can I avoid it? Long lost @ symbol get...
CVE-2022-28531
Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername aka Username field...
CVE-2022-28531
Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername aka Username field...
Sql injection
Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername aka Username field...
CVE-2022-28531
Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername aka Username field...
CVE-2022-28531
CVE-2022-28531 affects SourcecodeSter (Sourcecodester) Covid-19 Directory on Vaccination System 1.0 and is due to a SQL Injection in the admin/login.php txtusername field. The vulnerability arises from unsanitized input in the login path, enabling an attacker to manipulate the backend query. Expl...
Mozilla Firefox < 100.0.2
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 100.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-19 advisory. - If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution,...
Covid-19 Directory on Vaccination System SQL注入漏洞
The Covid-19 Directory On Vaccination System is a COVID-19 information management system by an individual developer in Ndueso Okorie, Nigeria. The system will accurately store and retrieve information about COVID-19 vaccinations to control the spread of a pandemic. A security vulnerability exists...
Mozilla Thunderbird < 91.9.1
The version of Thunderbird installed on the remote Windows host is prior to 91.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-19 advisory. - If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they cou...