PT-2022-19131 · Bentley · Bentley Microstation Connect

Name of the Vulnerable Software and Affected Versions: Bentley MicroStation CONNECT version 10.16.02.34 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicio...

PT-2022-13776

Name of the Vulnerable Software and Affected Versions School Club Application System version 1.0 Description A critical issue was found in the system, affecting requests to the "/scas/classes/Users.php?f=save user" endpoint. The manipulation with a POST request leads to privilege escalation. The...

CVE-2022-1287: Improper Control of Resource Identifiers

A vulnerability classified as critical was found in School Club Application System 1.0. This vulnerability affects a request to the file /scas/classes/Users.php?f=saveuser. The manipulation with a POST request leads to privilege escalation. The attack can be initiated remotely and does not requir...

CVE-2020-28847

Cross Site Scripting XSS vulnerability in xCss Valine v1.4.14 via the nick parameter to /classes/Comment...

PT-2022-8907

Name of the Vulnerable Software and Affected Versions xCss Valine version 1.4.14 Description A Cross Site Scripting XSS issue exists in xCss Valine via the nick parameter to the "/classes/Comment" endpoint. This allows for potential malicious script execution. The estimated number of potentially...

NexusPHP SQL Injection Vulnerability (CNVD-2022-65363)

NexusPHP is a free and open source complete solution for building PT websites. NexusPHP version 1.5 is vulnerable to SQL injection, which can be exploited by remote attackers to execute arbitrary SQL commands via the classes parameter...

IBM Cognos Controller Licensing Issue Vulnerability

IBM Cognos Controller is a business intelligence and planning solution from IBM Corporation. The product features process automation, financial audit controls, and the creation and management of financial reports.An authorization issue vulnerability exists in IBM Cognos Controller, which stems fr...

CVE-2020-24769

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the classes parameter...

CVE-2020-24769

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the classes parameter...

NexusPHP SQL注入漏洞

NexusPHP is a free and open source complete solution for building PT websites. NexusPHP version 1.5 is vulnerable to SQL injection, which can be exploited by remote attackers to execute arbitrary SQL commands via the classes parameter...

PT-2022-8693

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5 Description The issue allows remote attackers to execute arbitrary SQL commands via the classes parameter in the takeconfirm.php file. This enables attackers to manipulate database queries, potentially leading to...

CVE-2020-24769: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the classes parameter...

PT-2022-13637

Name of the Vulnerable Software and Affected Versions College Website Management System version 1.0 Description A vulnerability was found in the College Website Management System, affecting the file "/cwms/classes/Master.php?f=save contact" of the component Contact Handler. This issue leads to...

CVE-2022-26293: Improper Neutralization of Special Elements used in an SQL Command

Online Project Time Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the function saveemployee at /ptms/classes/Users.php...

PT-2022-17771

Name of the Vulnerable Software and Affected Versions Online Project Time Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter in the save employee function at the /ptms/classes/Users.php API...

CVE-2022-25498

CuppaCMS v1.0 was discovered to contain a remote code execution RCE vulnerability via the saveConfigData function in /classes/ajax/Functions.php...

CVE-2022-25498: Improper Control of Generation of Code

CuppaCMS v1.0 was discovered to contain a remote code execution RCE vulnerability via the saveConfigData function in /classes/ajax/Functions.php...

PT-2022-28839

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.16.10 Description The issue concerns a correction in lock classes index mapping. It was introduced in version v5.10 and fixed in version v5.16.11. The actual impact and attack plausibility have not yet be...

PT-2022-28679

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.102 Description The issue concerns a correction in lock classes index mapping. It was introduced in version v5.10 and fixed in version v5.10.102. The actual impact and attack plausibility have not yet been...

PT-2022-28750

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.25 Description The issue concerns a correction in lock classes index mapping. It was introduced in version v5.10 and fixed in Linux Kernel version v5.15.25. The actual impact and attack plausibility have no...