179 matches found
CampCodes Sales and Inventory System 注入漏洞
CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. An injection vulnerability exists in CampCodes Sales and Inventory System version 1.0, which stems from SQL injection due to incorrect manipulation of the parameter last in the file /pages/customeradd.php...
CampCodes Sales and Inventory System 注入漏洞
CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. An injection vulnerability exists in CampCodes Sales and Inventory System version 1.0, which stems from an incorrect manipulation of the parameter prodname in the file /pages/transactionadd.php that results ...
CampCodes Sales and Inventory System 安全漏洞
CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. A security vulnerability exists in CampCodes Sales and Inventory System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter prodname in the file...
CampCodes Sales and Inventory System 注入漏洞
CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. An injection vulnerability exists in CampCodes Sales and Inventory System version 1.0, which stems from an incorrect manipulation of the file /pages/creditoradd.php resulting in SQL injection...
CVE-2025-4469
A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected is an unknown function of the file /admin/add-admin.php. The manipulation of the argument txtusername/txtfullname/txtpassword/txtpassword2 leads to cross site scripting. It is...
PT-2025-6154 · Unknown · 1000 Projects Bookstore Management System
Name of the Vulnerable Software and Affected Versions: 1000 Projects Bookstore Management System version 1.0 Description: A vulnerability has been found in the Add Book Page component, specifically in the file process book add.php. The manipulation of the Book Name argument leads to cross-site...
Attendance and Payroll System SQL注入漏洞
Attendance and Payroll System is a PHP/MySQLi source code based Attendance and Payroll System by oretnom23. An SQL injection vulnerability exists in Attendance and Payroll System version 1.0, which originates from an SQL injection vulnerability in the id parameter of the /admin/overtimeadd.php pa...
NetBox 安全漏洞
NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A cross-site scripting vulnerability exists in NetBox v4.0.3, which stems from the lack of effective filtering and escaping of user-supplied data in t...
CVE-2024-35375
There is an arbitrary file upload vulnerability on the media add .php page in the backend of the website in version 5.7.114 of DedeCMS...
CVE-2024-35375
CVE-2024-35375 affects DedeCMS 5.7.114 backend and its mediaadd.php page, where an arbitrary file upload vulnerability exists in the media add functionality. The connected sources do not provide a confirmed fix or patched version. Root cause details are not explicitly described beyond the upload ...
PT-2024-22506 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A Cross-Site Request Forgery CSRF issue was found in the /dede/article add.php component. This allows an attacker to perform unintended actions on the website. Recommendations: For DedeCMS version 5.7, as a...
Desdev DedeCMS Security Breach
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...
Online College Library System SQL Injection Vulnerability
Online College Library System is an online college library system. A SQL injection vulnerability exists in Online College Library System version 1.0, which originates from a security issue in the /admin/borrowadd.php page...
CVE-2023-48078
SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter...
CVE-2023-43275
Cross-Site Request Forgery CSRF vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalogadd.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form...
CVE-2023-43275
Cross-Site Request Forgery CSRF vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalogadd.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form...
PT-2023-29981 · Jbig2Enc · Jbig2Enc
Name of the Vulnerable Software and Affected Versions: jbig2enc version 0.28 Description: The issue is related to a SEGV Segmentation Violation in the jbig2enc library. It occurs via the jbig2 add page function in the src/jbig2enc.cc file at line 512. Recommendations: For jbig2enc version 0.28,...
SourceCodester Contact Manager App Cross-Site Request Forgery Vulnerability
Contact Manager App is a contact manager application by the individual developer Remy Andrade. The SourceCodester Contact Manager App suffers from a cross-site request forgery vulnerability that originates from a cross-site request forgery attack via the add.php page...