CVE-2015-10019

A vulnerability, which was classified as problematic, has been found in foxoverflow MySimplifiedSQL. This issue affects some unknown processing of the file MySimplifiedSQLExamples.php. The manipulation of the argument FirstName/LastName leads to cross site scripting. The attack may be initiated...

CVE-2020-36639

A vulnerability has been found in AlliedModders AMX Mod X on Windows and classified as critical. This vulnerability affects the function cmdVoteMap of the file plugins/adminvote.sma of the component Console Command Handler. The manipulation of the argument amxvotemap leads to path traversal. The...

Path traversal

A vulnerability has been found in AlliedModders AMX Mod X on Windows and classified as critical. This vulnerability affects the function cmdVoteMap of the file plugins/adminvote.sma of the component Console Command Handler. The manipulation of the argument amxvotemap leads to path traversal. The...

CVE-2018-25051

A vulnerability, which was classified as problematic, was found in JmPotato Pomash. This affects an unknown part of the file Pomash/theme/clean/templates/editor.html. The manipulation of the argument article.title/content.title/article.tag leads to cross site scripting. It is possible to initiate...

GO-2022-1184 OS command injection vulnerability in code.sajari.com/docconv

The manipulation of the argument path to docconv.ConvertPDF,PDFHasImage leads to os command injection...

Path traversal

A vulnerability was found in RamseyK httpserver. It has been rated as critical. This issue affects the function ResourceHost::getResource of the file src/ResourceHost.cpp of the component URI Handler. The manipulation of the argument uri leads to path traversal: '../filedir'. The attack may be...

PT-2022-28050 · Unknown · Venganzas Del Pasado

Name of the Vulnerable Software and Affected Versions: Venganzas del Pasado affected versions not specified Description: A vulnerability was found in Venganzas del Pasado and classified as problematic. The manipulation of the argument the title leads to cross site scripting. The attack may be...

Cross site scripting

A vulnerability was found in ctrlo lenio and classified as problematic. Affected by this issue is some unknown functionality of the file views/contractor.tt. The manipulation of the argument contractor.name leads to cross site scripting. The attack may be launched remotely. The name of the patch ...

PT-2022-27697 · Unknown · Django-Openipam

Name of the Vulnerable Software and Affected Versions: django-openipam affected versions not specified Description: A problematic vulnerability has been found in django-openipam, affecting an unknown part of the file openipam/report/templates/report/exposed hosts.html. The manipulation of the...

CVE-2022-4581

A vulnerability was found in 1j01 mind-map and classified as problematic. This issue affects some unknown processing of the file app.coffee. The manipulation of the argument html leads to cross site scripting. The attack may be initiated remotely. The name of the patch is...

UBUNTU-CVE-2022-4399

A vulnerability was found in TicklishHoneyBee nodau. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/db.c. The manipulation of the argument value/name leads to sql injection. The name of the patch is 7a7d737a3929f335b9717ddbd31db91151b69ad2. It ...

Cross site scripting

A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be launched remotely. The exploit has bee...

CVE-2022-3979

A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAuthCookie of the file share/server/core/classes/CoreLogonMultisite.php. The manipulation of the argument hash leads to incorrect type conversion. The attack may be initiated...

Sql injection

A vulnerability has been found in Tim Campus Confession Wall and classified as critical. Affected by this vulnerability is an unknown functionality of the file share.php. The manipulation of the argument postid leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2022-3563

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...

PT-2022-22435 · Sourcecodester · Sourcecodester Human Resource Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Management System version 1.0 Description: A critical issue was found in the Profile Photo Handler component, where manipulation of the argument parameter leads to os command injection. This issue can be initiate...

CVE-2022-3012

A vulnerability was found in oretnom23 Fast Food Ordering System. It has been rated as critical. Affected by this issue is some unknown functionality of the file ffos/admin/reports/index.php. The manipulation of the argument date leads to sql injection. The attack may be launched remotely. The...

CVE-2022-3014 SourceCodester Simple Task Managing System cross site scripting

A vulnerability classified as problematic was found in SourceCodester Simple Task Managing System. This vulnerability affects unknown code. The manipulation of the argument studentadd leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is...

CVE-2022-2769

CVE-2022-2769 affects SourceCodester Company Website CMS. The vulnerability is a cross-site scripting flaw in the /dashboard/contact handler where manipulating the phone parameter allows remote exploitation. Multiple connected sources confirm the issue, including Red Hat and CVE records, describi...

The vulnerability of the API FileUtil.unTar(file, file) implementation in the Apache Hadoop distributed development and execution platform allows a attacker to execute arbitrary commands.

The vulnerability of the API FileUtil.unTarfile, file implementation in the Apache Hadoop distributed development and execution platform is related to the introduction or modification of arguments. Exploiting this vulnerability may allow a malicious actor to execute arbitrary commands remotely...