71 matches found
CVE-2024-2715
A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/user-search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launche...
CVE-2025-2715
A vulnerability classified as problematic has been found in timschofield webERP up to 5.0.0.rc+13. This affects an unknown part of the file ConfirmDispatchInvoice.php of the component Confirm Dispatch and Invoice Page. The manipulation of the argument Narrative leads to cross site scripting. It i...
CVE-2025-2715
A vulnerability classified as problematic has been found in timschofield webERP up to 5.0.0.rc+13. This affects an unknown part of the file ConfirmDispatchInvoice.php of the component Confirm Dispatch and Invoice Page. The manipulation of the argument Narrative leads to cross site scripting. It i...
CVE-2025-2715 timschofield webERP Confirm Dispatch and Invoice Page ConfirmDispatch_Invoice.php cross site scripting
A vulnerability classified as problematic has been found in timschofield webERP up to 5.0.0.rc+13. This affects an unknown part of the file ConfirmDispatchInvoice.php of the component Confirm Dispatch and Invoice Page. The manipulation of the argument Narrative leads to cross site scripting. It i...
CVE-2025-2715 timschofield webERP Confirm Dispatch and Invoice Page ConfirmDispatch_Invoice.php cross site scripting
A vulnerability classified as problematic has been found in timschofield webERP up to 5.0.0.rc+13. This affects an unknown part of the file ConfirmDispatchInvoice.php of the component Confirm Dispatch and Invoice Page. The manipulation of the argument Narrative leads to cross site scripting. It i...
CVE-2025-2715
The CVE-2025-2715 entry describes a cross-site scripting flaw affecting timschofield webERP up to 5.0.0.rc+13, in ConfirmDispatch_Invoice.php (Narrative parameter). Remote exploitation is possible; multiple sources note the vulnerability and advise applying a patch. The initial disclosure indicat...
CVE-2024-2715 Campcodes Complete Online DJ Booking System user-search.php cross site scripting
A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/user-search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launche...
CVE-2023-2715
creationtimestamp| type| source ---|---|--- 2023-05-20 07:23:37+00:00| seen| https://t.me/cibsecurity/64478...
CVE-2023-2715
CVE-2023-2715 concerns the Groundhogg WordPress plugin. Public records show vulnerable versions up to 2.7.9.8 where a missing capability check in the submit_ticket function can allow an authenticated user to modify data or create an admin account via a ticket that includes site data and a login l...
CVE-2022-2715
creationtimestamp| type| source ---|---|--- 2022-08-09 12:24:26+00:00| seen| https://t.me/cibsecurity/47766...
CVE-2022-2715 SourceCodester Employee Management System eloginwel.php sql injection
A vulnerability has been found in SourceCodester Employee Management System and classified as critical. This vulnerability affects unknown code of the file eloginwel.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...
CVE-2022-2715
CVE-2022-2715 affects SourceCodester Employee Management System; the eloginwel.php file has a flaw where manipulating the id parameter enables SQL injection. The vulnerability can be exploited remotely and the exploit has been disclosed publicly (VDB-205834). Based on the provided documents, ther...
CVE-2020-2715
Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2020-2715
Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2020-2715
CVE-2020-2715 affects Oracle Banking Corporate Lending (Core) within Oracle Financial Services Applications. Affected versions: 12.3.0–12.4.0 and 14.0.0–14.3.0. The vulnerability permits a low-privilege, network-accessible attacker over HTTP to read and modify data (update/insert/delete) in the a...
CVE-2011-2715
creationtimestamp| type| source ---|---|--- 2020-01-15 00:39:11+00:00| seen| https://t.me/cibsecurity/9185...
CVE-2011-2715
An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names...
Rockwell Automation/Allen-Bradley PanelView 5500 2715-B15CA HMI Terminal
Binary data 754886.prm...
Rockwell Automation/Allen-Bradley PanelView 5500 2715-T9WD HMI Terminal
Binary data 754875.prm...
Rockwell Automation/Allen-Bradley PanelView 5500 2715-T7CD HMI Terminal
Binary data 754871.prm...