334 matches found
CVE-2022-27667
Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console CMC - version 430, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...
CVE-2022-27667
Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console CMC - version 430, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...
Information disclosure
Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console CMC - version 430, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...
Client management SQL injection vulnerability
Simple Client Management System is a simple web-based application that provides an online platform to manage company customer invoices.Simple Client Management System 1.0 is vulnerable to a SQL injection vulnerability that could be caused by a password parameter in Login.php. No detailed...
CVE-2021-43484
A Remote Code Execution RCE vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request...
CVE-2021-43484
A Remote Code Execution RCE vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request...
CVE-2021-43484
A Remote Code Execution RCE vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request...
Remote code execution
A Remote Code Execution RCE vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request...
CVE-2021-43484
A Remote Code Execution RCE vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request...
CVE-2021-43484
CVE-2021-43484 affects Simple Client Management System 1.0, specifically the create.php file, where remote code execution arises from failure to validate the extension of a file in a request. The vulnerability is documented with a high/severe impact (CVSS v3.1: 9.8, CRITICAL, network access, no u...
CVE-2021-43505
Multiple Cross Site Scripting XSS vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via 1 Add new Client and 2 Add new invoice...
CVE-2021-43506
An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...
CVE-2021-43506
An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...
CVE-2021-43505
Multiple Cross Site Scripting XSS vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via 1 Add new Client and 2 Add new invoice...
Sql injection
An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...
Cross site scripting
Multiple Cross Site Scripting XSS vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via 1 Add new Client and 2 Add new invoice...
CVE-2021-43506
The vulnerability CVE-2021-43506 affects Sourcecodester Simple Client Management System 1.0, where an SQL Injection can be triggered via the password parameter in Login.php. The root cause is improper input handling leading to unauthorized access or data exposure. Multiple sources (NVD and Red Ha...
CVE-2021-43506
An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php...
CVE-2021-43505
CVE-2021-43505 affects Ssourcecodester Simple Client Management System v1. The vulnerability is described as multiple Cross-Site Scripting (XSS) issues exploitable via adding a new client or adding a new invoice. The connected documents confirm XSS in this product/version combination; no explicit...