1507 matches found
CVE-2023-6653
A vulnerability was found in PHPGurukul Teacher Subject Allocation Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/subject.php of the component Create a new Subject. The manipulation of the argument cid leads to...
CVE-2023-6653: Cross-Site Request Forgery (CSRF)
A vulnerability was found in PHPGurukul Teacher Subject Allocation Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/subject.php of the component Create a new Subject. The manipulation of the argument cid leads to...
PT-2023-32729
Name of the Vulnerable Software and Affected Versions PHPGurukul Teacher Subject Allocation Management System version 1.0 Description A vulnerability was found in the PHPGurukul Teacher Subject Allocation Management System, affecting some unknown functionality of the file /admin/subject.php,...
CVE-2023-5264
A vulnerability classified as critical was found in huakecms 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/cmscontent.php. The manipulation of the argument cid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...
Sql injection
A vulnerability classified as critical was found in huakecms 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/cmscontent.php. The manipulation of the argument cid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...
CHINA Network huakecms SQL Injection Vulnerability
CHINA Network huakecms is a content management system from China Network. A SQL injection vulnerability exists in CHINA Network huakecms version 3.0, which stems from an incorrect operation of the parameter cid that can lead to sql injection...
CVE-2023-5264: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in huakecms 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/cmscontent.php. The manipulation of the argument cid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...
CVE-2023-42806 Snapshot signature not including HeadID will allow replay attacks
Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, not signing and verifying $\mathsfcid$ allows an attacker which must be a participant of this head to use a snapshot from an old head instance with the same participants to close the head or contest the state with i...
Intel® NUC CID Advisory
Summary: A potential security vulnerability in some ITE Tech consumer infrared drivers CID for some Intel® NUCs may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-23577 Description: Uncontrolled...
PHPJabbers Availability Booking Calendar 5.0 Cross Site Scripting
Exploit Title: PHPJabbers Availability Booking Calendar 5.0 - Reflected XSS Exploit Author: CraCkEr Date: 20/07/2023 Vendor: PHPJabbers Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/availability-booking-calendar/ Tested on: Windows 10 Pro Impact: Manipulat...
CVE-2023-33560
There is a Cross Site Scripting XSS vulnerability in "cid" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...
PT-2023-24386 · Phpjabbers · Php Jabbers Time Slots Booking Calendar
Name of the Vulnerable Software and Affected Versions: PHPJabbers Time Slots Booking Calendar version 3.3 Description: The issue is related to a Cross Site Scripting XSS vulnerability. It affects the cid parameter of the preview.php file. This vulnerability can potentially be exploited to execute...
CVE-2023-33560: Improper Neutralization of Input During Web Page Generation
There is a Cross Site Scripting XSS vulnerability in "cid" parameter of preview.php in PHPJabbers Time Slots Booking Calendar v3.3...
CVE-2023-37771
Art Gallery Management System v1.0 contains a SQL injection vulnerability via the cid parameter at /agms/product.php...
CVE-2023-37771
Art Gallery Management System v1.0 contains a SQL injection vulnerability via the cid parameter at /agms/product.php...
CVE-2023-37771
Art Gallery Management System v1.0 contains a SQL injection vulnerability via the cid parameter at /agms/product.php...
Sql injection
Art Gallery Management System v1.0 contains a SQL injection vulnerability via the cid parameter at /agms/product.php...
Art Gallery Management System SQL注入漏洞
Art Gallery Management System is an art gallery management system. An SQL injection vulnerability exists in Art Gallery Management System v1.0, which originates from the lack of validation of the parameter cid in /agms/product.php against external SQL input. An attacker can exploit this...
