1601 matches found
Sql injection
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=display&value=0&sid=2...
CVE-2022-28432
The CVE-2022-28432 entry concerns Baby Care System v1.0 with a SQL injection vulnerability exploitable via /admin.php?id=siteoptions&social=display&value=0&sid=2. Public sources describe that the vulnerability arises from missing validation of external input in the SQL statement, enabling potenti...
CVE-2022-1187 WP YouTube Live <= 1.7.21 - Reflected Cross-Site Scripting
The WordPress WP YouTube Live Plugin is vulnerable to Reflected Cross-Site Scripting via POST data found in the /inc/admin.php file which allows unauthenticated attackers to inject arbitrary web scripts in versions up to, and including, 1.7.21...
CVE-2022-27475
Cross site scripting XSS vulnerability in tramyardg hotel-mgmt-system, allows attackers to execute arbitrary code when when /admin.php is loaded...
CVE-2022-27475
Cross site scripting XSS vulnerability in tramyardg hotel-mgmt-system, allows attackers to execute arbitrary code when when /admin.php is loaded...
Cross site scripting
Cross site scripting XSS vulnerability in tramyardg hotel-mgmt-system, allows attackers to execute arbitrary code when when /admin.php is loaded...
CVE-2022-27475
CVE-2022-27475 is an XSS vulnerability in tramyardg hotel-mgmt-system (version 1.0) due to lack of proper data validation/escaping in /admin.php. Exploitation would allow execution of arbitrary JavaScript in the victim’s browser; impact details are described in the linked records as client-side s...
CVE-2022-27475
Cross site scripting XSS vulnerability in tramyardg hotel-mgmt-system, allows attackers to execute arbitrary code when when /admin.php is loaded...
CVE-2022-27886
Maccms v10 was discovered to contain a reflected cross-site scripting XSS vulnerability in /admin.php/admin/ulog/index.html via the wd parameter...
CVE-2022-27885
Maccms v10 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities in /admin.php/admin/website/data.html via the select and input parameters...
CVE-2022-27884
Maccms v10 was discovered to contain a reflected cross-site scripting XSS vulnerability in /admin.php/admin/plog/index.html via the wd parameter...
Cross site scripting
Maccms v10 was discovered to contain a reflected cross-site scripting XSS vulnerability in /admin.php/admin/ulog/index.html via the wd parameter...
CVE-2022-27887
Summary: CVE-2022-27887 affects Maccms v10 and is a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/vod/data.html via the repeat parameter. The issue is described across multiple feeds (NVD/Red Hat/CNVD/CNNVD, etc.) with consistent details that the vulnerability originates ...
CVE-2022-27887
Maccms v10 was discovered to contain a reflected cross-site scripting XSS vulnerability in /admin.php/admin/vod/data.html via the repeat parameter...
CVE-2022-27886
Maccms v10 contains a reflected XSS in /admin.php/admin/ulog/index.html via the wd parameter. The issue is reported across multiple sources (CVE-2022-27886) and is confirmed in Red Hat/CNVD/CVE listings, describing a JavaScript-injection style vulnerability that could be triggered by user-supplie...
CVE-2022-27885
CVE-2022-27885 affects Maccms v10 with multiple reflected XSS vulnerabilities in /admin.php/admin/website/data.html, exploitable via select and input parameters due to insufficient output filtering. Root cause described as lack of user-supplied data validation and filtering, enabling JavaScript i...
CVE-2022-27885
Maccms v10 was discovered to contain multiple reflected cross-site scripting XSS vulnerabilities in /admin.php/admin/website/data.html via the select and input parameters...
CVE-2022-27884
CVE-2022-27884 affects Maccms v10 and is a reflected cross-site scripting (XSS) vulnerability in the admin interface, specifically in /admin.php/admin/plog/index.html via the wd parameter. The root cause is insufficient input validation/escaping of user-supplied data in that parameter, enabling i...