22299 matches found
CVE-2022-30456
Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting XSS via /bcms/classes/Master.php?f=savecourtrental...
CVE-2022-30456
Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting XSS via /bcms/classes/Master.php?f=savecourtrental...
Sql injection
Badminton Center Management System 1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=deletecourtrental, id...
Cross site scripting
Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting XSS via /bcms/classes/Master.php?f=savecourtrental...
CVE-2022-30455
Badminton Center Management System 1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=deletecourtrental, id...
CVE-2022-30455
CVE-2022-30455 affects Badminton Center Management System 1.0. The vulnerability is a SQL injection in the delete_court_rental path: /bcms/classes/Master.php?f=delete_court_rental, id. Root cause is an injectable parameter in the affected PHP endpoint (no further technical detail provided). Impac...
CVE-2022-30456
** CVE-2022-30456 **: Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /bcms/classes/Master.php?f=save_court_rental. The connected documents confirm an XSS issue but do not provide concrete exploit details, affected versions beyond 1.0, or specific root cause...
CVE-2022-30456
Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting XSS via /bcms/classes/Master.php?f=savecourtrental...
Telecommunication Software SAMwin Contact Center Suite SQL注入漏洞
Telecommunication Software SAMwin Contact Center Suite is a highly versatile and flexible contact center software solution from Telecommunication Software. A security vulnerability exists in Telecommunication Software SAMwin Contact Center Suite version 5.1 that stems from an architectural issue...
Jenkins Enterprise and Operations Center 2.303.x < 2.303.30.0.13 / 2.332.3.4 Multiple Vulnerabilities (CloudBees Security Advisory 2022-05-17)
The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.303.x prior to 2.303.30.0.13, or 2.x prior to 2.332.3.4. It is, therefore, affected by multiple vulnerabilities, including the following: - Jenkins Rundeck Plugin 3.6.10 and earlier does not...
Telecommunication Software SAMwin Contact Center Suite 安全漏洞
Telecommunication Software SAMwin Contact Center Suite is a highly versatile and flexible contact center software solution from Telecommunication Software. A security vulnerability exists in Telecommunication Software SAMwin Contact Center Suite version 5.1. The vulnerability stems from a conflic...
Badminton Center Management System 跨站脚本漏洞
Badminton Center Management System is a badminton center management system by Carlo Montero personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records. A security vulnerability exists in Badminton Center Management System...
Badminton Center Management System SQL注入漏洞
Badminton Center Management System is a badminton center management system. It provides an online and automated platform for badminton centers to manage their daily transactions and records. sql injection vulnerability exists in Badminton Center Management 1.0. An attacker can exploit this...
CVE-2022-1817
A vulnerability, which was classified as problematic, was found in Badminton Center Management System. This affects the userlist module at /bcms/admin/?page=user/list. The manipulation of the argument username with the input 1 leads to an authenticated cross site scripting. Exploit details have...
CVE-2022-1817
A vulnerability, which was classified as problematic, was found in Badminton Center Management System. This affects the userlist module at /bcms/admin/?page=user/list. The manipulation of the argument username with the input 1 leads to an authenticated cross site scripting. Exploit details have...
Cross site scripting
A vulnerability, which was classified as problematic, was found in Badminton Center Management System. This affects the userlist module at /bcms/admin/?page=user/list. The manipulation of the argument username with the input 1 leads to an authenticated cross site scripting. Exploit details have...
CVE-2022-1817 Badminton Center Management System Userlist Module cross site scripting
A vulnerability, which was classified as problematic, was found in Badminton Center Management System. This affects the userlist module at /bcms/admin/?page=user/list. The manipulation of the argument username with the input 1 leads to an authenticated cross site scripting. Exploit details have...
CVE-2022-1817 Badminton Center Management System Userlist Module cross site scripting
A vulnerability, which was classified as problematic, was found in Badminton Center Management System. This affects the userlist module at /bcms/admin/?page=user/list. The manipulation of the argument username with the input 1 leads to an authenticated cross site scripting. Exploit details have...
CVE-2022-1817
CVE-2022-1817 affects the Badminton Center Management System, specifically the userlist module at /bcms/admin/?page=user/list. The vulnerability is an authenticated cross-site scripting (XSS) flaw triggered by manipulating the username parameter with a crafted payload (for example: 1). Exploit de...
Cisco Issues Patch for New IOS XR Zero-Day Vulnerability Exploited in the Wild
Cisco on Friday rolled out fixes for a medium-severity vulnerability affecting IOS XR Software that it said has been exploited in real-world attacks. Tracked as CVE-2022-20821 CVSS score: 6.5, the issue relates to an open port vulnerability that could be abused by an unauthenticated, remote...