44 matches found
Code-Projects Vehicle Management 注入漏洞
Vehicle Management is a vehicle management system. Vehicle Management suffers from an SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the parameter company in file /filter3.php. An attacker can exploit this vulnerability to execute illega...
CVE-2024-46240
Collabtive 3.1 is vulnerable to Cross-site scripting XSS via the name parameter under action=system and the company/contact parameters under action=addcust within admin.php file...
CVE-2023-46396
Audimex 15.0.0 is vulnerable to Cross Site Scripting XSS in /audimex/cgi-bin/wal.fcgi via company parameter search filters...
CVE-2023-6978
The WP Job Manager – Company Profiles plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'company' parameter in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...
PT-2024-15152 · WordPress · Wp Job Manager – Company Profiles
Name of the Vulnerable Software and Affected Versions: WP Job Manager – Company Profiles versions up to and including 1.7 Description: The issue is related to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts in pages through t...
Collabtive 跨站脚本漏洞
Collabtive is a web-based project management system. The system includes features such as project management, document management and time tracking. A security vulnerability exists in Collabtive version 3.1, which originates from a cross-site scripting attack via the name parameter when...
PT-2024-39856 · Unknown · Code-Projects Restaurant Reservation System
Name of the Vulnerable Software and Affected Versions: code-projects Restaurant Reservation System version 1.0 Description: A critical vulnerability has been found in the code-projects Restaurant Reservation System. This issue affects an unknown part of the file filter3.php. The manipulation of t...
Code-Projects Restaurant Reservation System SQL注入漏洞
Code-Projects Restaurant Reservation System is a Code-Projects open source restaurant reservation system. Code-Projects Restaurant Reservation System version 1.0 suffers from a SQL injection vulnerability, which originates from the parameter company in the file /updatebal.php that can lead to SQL...
Code-Projects Restaurant Reservation System SQL注入漏洞
Code-Projects Restaurant Reservation System is a Code-Projects open source restaurant reservation system . Code-Projects Restaurant Reservation System version 1.0 suffers from a SQL injection vulnerability, which originates from the parameter company in the file /addcompany.php that can lead to S...
PT-2024-39594 · Unknown · Code-Projects Restaurant Reservation System
Name of the Vulnerable Software and Affected Versions: code-projects Restaurant Reservation System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /updatebal.php. The manipulation of the company argument leads to SQL injection. This...
CVE-2023-46396
Audimex 15.0.0 is vulnerable to Cross Site Scripting XSS in /audimex/cgi-bin/wal.fcgi via company parameter search filters...
CVE-2023-46396
Audimex 15.0.0 is vulnerable to Cross Site Scripting XSS in /audimex/cgi-bin/wal.fcgi via company parameter search filters...
Cross site scripting
Audimex 15.0.0 is vulnerable to Cross Site Scripting XSS in /audimex/cgi-bin/wal.fcgi via company parameter search filters...
CVE-2023-46396
Audimex 15.0.0 is vulnerable to Cross Site Scripting XSS in /audimex/cgi-bin/wal.fcgi via company parameter search filters...
PT-2023-30001 · Audimex · Audimex
Name of the Vulnerable Software and Affected Versions: Audimex version 15.0.0 Description: The issue concerns Cross Site Scripting XSS in the /audimex/cgi-bin/wal.fcgi endpoint via the company parameter in search filters. Recommendations: For Audimex version 15.0.0, as a temporary workaround,...
Audimex AG AudimexEE Cross-Site Scripting Vulnerability
Audimex AG AudimexEE is a system for audit management from Audimex Ag, Germany. The system meets complex audit processes around a company's business, supports customization for use and is deployed platform-independently. A cross-site scripting vulnerability exists in Audimex version 15.0.0, which...
CVE-2023-39712
Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Put section...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Put section...
CVE-2023-39712
Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Put section...
PT-2023-29570 · Sourcecodester · Sourcecodester Inventory Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A vulnerability has been found in the SourceCodester Inventory Management System, affecting an unknown functionality of the file suppliar data.php. The manipulation of the...