Portabilisu202fi‑Diário 代码注入漏洞

Portabilisu202fi-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A code injection vulnerability exists in Portabilisu202fi-Diário version 1.5.0, which originates from cross-site scripting due to improper handling of the parameter...

Thinkgem JeeSite 代码注入漏洞

Thinkgem JeeSite is an open source Java EE enterprise-class rapid development platform for China Zhuo Yuan Thinkgem company . The platform includes system permissions components , data permissions components , data dictionary components , core tools components , view manipulation components ,...

Portabilisu202fi‑Diário 代码注入漏洞

Portabilisu202fi-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A code injection vulnerability exists in Portabilisu202fi-Diário version 1.5.0, which stems from cross-site scripting due to improper handling of the parameter Anexo in the...

Portábilis i-Educar 代码注入漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portabilis i-Educar version 2.9.0, which originates from cross-site scripting due to improper handling of the parameter Deficiência ou...

Portabilisu202fi‑Diário 代码注入漏洞

Portabilisu202fi-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A code injection vulnerability exists in Portabilisu202fi-Diário version 1.5.0, which originates from cross-site scripting due to improper handling of the parameter...

webssh 代码注入漏洞

webssh is a web-based ssh client by the individual developer Shengdun Hua. A code injection vulnerability exists in WebSSH 1.6.2 and earlier versions, which originates from cross-site scripting due to incorrect manipulation of the hostname/port parameter by the Login Page component...

RuoYi 代码注入漏洞

RuoYi is a backend management system for individual developers of RuoYi in China. RuoYi 4.8.1 and previous versions of code injection vulnerability exists, the vulnerability stems from the file com/ruoyi/web/controller/system/SysNoticeController.java function addSave incorrect operation leads to...

CVE-2024-39835

A code injection vulnerability has been identified in the Robot Operating System ROS 'roslaunch' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval method to process user-supplied, unsanitized parameter values within the...

CampCodes Online Movie Theater Seat Reservation System 代码注入漏洞

CampCodes Online Movie Theater Seat Reservation System is an online movie theater seat reservation system from CampCodes Philippines, Inc. A code injection vulnerability exists in version 1.0 of the Campcodes Online Movie Theater Seat Reservation System, which originates from cross-site scripting...

PHPGurukul Apartment Visitors Management System 代码注入漏洞

PHPGurukul Apartment Visitors Management System is an apartment visitor management system from PHPGurukul. A code injection vulnerability exists in version 1.0 of the PHPGurukul Apartment Visitors Management System due to cross-site scripting caused by improper handling of the parameter visname i...

CVE-2025-53925

Emlog is an open source website building system. A cross-site scripting XSS vulnerability in emlog up to and including pro-2.5.17 allows authenticated remote attackers to inject arbitrary web script or HTML via the file upload functionality. As an authenticated user it is possible to upload an .s...

CVE-2025-53923

Emlog is an open source website building system. A cross-site scripting XSS vulnerability in emlog up to and including pro-2.5.17 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. Due to lack of sanitization it is possible to inject HTML/JS code into keywor...

CVE-2025-53924

Emlog is an open source website building system. A cross-site scripting XSS vulnerability in emlog up to and including pro-2.5.17 allows authenticated remote attackers to inject arbitrary web script or HTML via the siteurl parameter. It is possible to inject malicious code into siteurl parameter...

CVE-2025-50056

CVE-2025-50056 : Reflected XSS in the RSMail! component for Joomla. Affected versions: 1.19.20–1.22.26 (RSMail!); vulnerability arises from improper handling of crafted parameters, enabling remote script/HTML injection. Public details confirm the issue and affected range, but there is no document...

Arbitrary Code Injection

pyLoad-ng is vulnerable to Arbitrary Code Injection. The vulnerability is due to unsafe JavaScript evaluation caused by insecure CAPTCHA processing logic that allows unauthenticated remote attackers to execute arbitrary code in the client browser and potentially on the backend server...

PHPGurukul Online Security Guards Hiring System 代码注入漏洞

Online Security Guards Hiring System is an online security guard hiring system. Online Security Guards Hiring System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter searchdata in the file...

wx-discuz 代码注入漏洞

wx-discuz is descreekert individual developer of a microsoft public docking discuz forum software. Code injection vulnerability exists in wx-discuz 12bd4745c63ec203cb32119bf77ead4a923bf277 and previous versions, which stems from a cross-site scripting attack due to incorrect operation of the...

VulnCheck KEV: CVE-2025-49704

Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

PT-2025-30027 · Joomla +1 · Joomla! +1

Name of the Vulnerable Software and Affected Versions: RSBlog! versions 1.11.6 through 1.14.5 Description: A stored cross-site scripting XSS issue exists in the RSBlog! component for Joomla. The issue allows remote authenticated users to inject arbitrary web script or HTML code via the jformtags...

Gnuboard 代码注入漏洞

Gnuboard is a suite of extensible forum programs from the Gnuboard open source. A code injection vulnerability exists in Gnuboard g6 6.0.10 and earlier versions, which stems from a cross-site scripting attack due to misuse of the component Post Reply Handler...