PT-2026-141854

Group-Office is an enterprise customer relationship management and groupware tool. Prior to version 26.0.37, go/modules/community/bookmarks/controller/Bookmark.php's description action takes a fully attacker-controlled url parameter and passes it, unvalidated, to GOBaseUtilHttpClient::request...

CVE-2024-8152: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /endpoint/add-bookmark.php of the component Parameter Handler. The manipulation of the argument name/url leads to cross site scripting...

CVE-2024-8153: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /endpoint/delete-bookmark.php. The manipulation of the argument bookmark leads to cross site scripting. The attack may be initiated...

CVE-2024-8154: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in SourceCodester QR Code Bookmark System 1.0. Affected is an unknown function of the file /endpoint/update-bookmark.php of the component Parameter Handler. The manipulation of the argument tblbookmarkid/name/url leads to cross site...

CVE-2024-3797: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-bookmark.php?bookmark=1. The manipulation of the argument bookmark leads to sql injection. The attack can be initiated...

SQL Injection in ampache/ampache

Description The application does not validate and escape the client parameter before using it in a SQL statement at getbookmark function in Repository/Model/Bookmark.php file, leading to a SQL Injection The function named getbookmark which called by in 3 functions: bookmarkcreate, bookmarkedit an...

WordPress 1.0-3.8.1 - Authenticated Admin Blind SQL Injection

Description The vulnerable line in question is line 230 of wp-includes/bookmark.php in WordPress 3.8.1...

PT-2012-6183

Name of the Vulnerable Software and Affected Versions DFLabs PTK version 1.0.5 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the arg4 parameter in the ptk/lib/modal bookmark.php file. Recommendations For DFLabs PTK versio...