952 matches found
deer-wms-2 SQL注入漏洞
deer-wms-2 is an open source warehouse management system from China's deerwms. A security vulnerability exists in deer-wms-2 3.3 and earlier versions, which originates from SQL injection due to incorrect manipulation of paramsdataScope in the file /system/role/authUser/unallocatedList...
PT-2025-30752 · Phpgurukul · Phpgurukul User Registration & Login +1
Name of the Vulnerable Software and Affected Versions: PHPGurukul User Registration & Login and User Management version 3.3 Description: A critical issue exists in PHPGurukul User Registration & Login and User Management. The vulnerability is due to SQL injection in the...
PHPGurukul Login and User Management System 注入漏洞
PHPGurukul Login and User Management System is a login and user management system from PHPGurukul Inc. An injection vulnerability exists in version 3.3 of the PHPGurukul Login and User Management System, which originates from SQL injection due to incorrect manipulation of the parameter ID in the...
PT-2025-30820 · Phpgurukul · Phpgurukul User Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Login and User Management System version 3.3 Description: A critical issue exists in PHPGurukul Login and User Management System. The vulnerability is located in unknown code within the /admin/yesterday-reg-users.php file...
deer-wms-2 注入漏洞
deer-wms-2 is a warehouse management system in China deerwms open source . Deer-wms-2 3.3 and earlier versions exist injection vulnerability, the vulnerability stems from the file /system/role/list on the parameter params dataScope wrong operation leads to SQL injection...
PHPGurukul User Registration & Login and User Management System Security Vulnerability
PHPGurukul User Registration & Login and User Management System is a user registration & login and user management system from PHPGurukul Inc. A security vulnerability exists in PHPGurukul User Registration & Login and User Management System version 3.3, which is caused by SQL injection due to...
deer-wms-2 SQL注入漏洞
deer-wms-2 is a warehouse management system in China deerwms open source. A SQL injection vulnerability exists in deer-wms-2 3.3 and earlier versions, which originates from the incorrect operation of the parameter ancestors in the file /system/dept/edit that leads to SQL injection...
PT-2025-30702 · Unknown · Deerwms Deer-Wms-2
Name of the Vulnerable Software and Affected Versions: deerwms deer-wms-2 versions 2.0 through 3.3 Description: A critical issue exists in deerwms deer-wms-2. The vulnerability is due to a SQL injection flaw within an unknown function of the /system/dept/edit API endpoint. The ancestors parameter...
PHPGurukul User Registration & Login and User Management System 注入漏洞
PHPGurukul User Registration & Login and User Management System is a user registration & login and user management system from PHPGurukul Inc. An injection vulnerability exists in PHPGurukul User Registration & Login and User Management System version 3.3, which is caused by a SQL injection due t...
PHPGurukul User Registration & Login and User Management System 注入漏洞
PHPGurukul User Registration & Login and User Management System is a user registration & login and user management system from PHPGurukul Inc. An injection vulnerability exists in PHPGurukul User Registration & Login and User Management System version 3.3, which is caused by a SQL injection due t...
PT-2025-29341 · Phpgurukul · Phpgurukul User Registration & Login/User Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul User Registration & Login and User Management System version 3.3 Description: A critical vulnerability exists in PHPGurukul User Registration & Login and User Management System 3.3. The issue is a SQL injection vulnerability locate...
RHSA-2025:10217 Red Hat Security Advisory: ruby:3.3 security update
Bulletin has no description...
Pi-hole 操作系统命令注入漏洞
Pi-hole is a web-grade ad-blocking application from Pi-hole, Inc. An operating system command injection vulnerability exists in Pi-hole 3.3 and earlier versions, which stems from improper parameter cleanup when adding a domain name to the allowed list, which could lead to command injection...
GHSA-47M2-26RW-J2JW vulnerabilities
Vulnerabilities for packages: ruby3.3-rails, ruby3.2-rails, ruby3.4-rails, logstash...
WordPress plugin HR Management Lite 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
CVE-2025-24744
Missing Authorization vulnerability in NotFound Bridge Core. This issue affects Bridge Core: from n/a through 3.3...
CVE-2024-24002
jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.MaterialController: com.jsh.erp.utils.BaseResponseInfo getListWithStock function of jshERP does not filter column and order parameters well enough, and an attacker can construct malicious payload to bypass jshERP's protection...
CVE-2024-1850
The AI Post Generator | AutoWriter plugin for WordPress is vulnerable to unauthorized access, modification or deletion of posts due to a missing capability check on functions hooked by AJAX actions in all versions up to, and including, 3.3. This makes it possible for authenticated attackers, with...