Home Clean Services Management System Code Issues and Vulnerabilities

A remote code execution vulnerability exists in Home Clean Services Management System version 1.0, which originates from register.php?link=registerand fails to properly filter the special elements of the construction snippet. An attacker could exploit this vulnerability to cause arbitrary code...

cleanwavecarwashes.com Cross Site Scripting vulnerability OBB-2622199

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-30052

In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...

CVE-2022-30052

In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...

CVE-2022-30052

In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...

Sql injection

In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...

CVE-2022-30052

In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...

CVE-2022-30052

CVE-2022-30052 affects Home Clean Service System 1.0. Affected component: password handling parameter; underlying issue is SQL injection in the password field. Documented impact per CVSS: high severity (CVSS v2 base 7.5, CVSS v3.1 base 9.8) with network attack vector, no authentication, and parti...

PT-2022-19988

Name of the Vulnerable Software and Affected Versions In Home Clean Service System version 1.0 Description The issue concerns a SQL injection vulnerability. Specifically, the password parameter is vulnerable to SQL injection attacks. Recommendations For In Home Clean Service System version 1.0,...

Home Clean Service System SQL Injection Vulnerability

Home Clean Service System is a system for providing home cleaning services by Carlo Montero, a personal developer. A security vulnerability exists in Home Clean Service System version 1.0, which stems from the password parameter being susceptible to SQL injection attacks...

CVE-2022-30052: Improper Neutralization of Special Elements used in an SQL Command

In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...

GHSA-XP26-P53H-6H2P Improper Neutralization of Input During Web Page Generation in LXML

An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to...

PT-2025-8241

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer-dereference issue in the slgt clean function of the synclink gt driver has been identified. This occurs when the driver fails at alloc hdlcdev and the driver module is the...

supercleanmedical.com Cross Site Scripting vulnerability OBB-2488487

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

5 ways to spring clean your security

It is now officailly spring in the Northern Hemisphere, and with spring and the longer days comes the inescapable urge to shake off the lethargy of Winter and embrace the need to go through your stuff, throw a bunch of it out, and give the rest of it a shiny new lustre. And in our increasingly...

WordPress Optimole plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress plugin Optimole version 3.3.2 has a cross-site scripting vulnerability that stems from the failure of image optimization and...

d-clean (0.0.2), fabric3 (>=1.11.1.post1, <=1.12.0.post1) +4 more potentially affected by CVE-2022-24302 via paramiko (1.18.5)

paramiko PYPI version 1.18.5 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - d-clean 0.0.2 - fabric3 =1.11.1.post1, =1.0.2, =0.1.0.dev22, =0.1.0.dev27 - vr-server 6.11.0 - wazimap 2.1.0 Source cves: CVE-2022-24302 Source...

cleanpullcord.co.uk Improper Access Control vulnerability OBB-2414694

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Clean Social Icons plugin <= 0.9.11 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Clean Social Icons plugin versions = 0.9.11. Solution No patched version available...

WordPress Clean Social Icons plugin <= 0.9.11 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Clean Social Icons plugin versions = 0.9.11. Solution No patched version available...