Lucene search
+L

44 matches found

CNNVD
CNNVD
added 2025/07/30 12:00 a.m.10 views

Code-Projects Vehicle Management 注入漏洞

Vehicle Management is a vehicle management system. Vehicle Management suffers from an SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the parameter company in file /filter3.php. An attacker can exploit this vulnerability to execute illega...

9.8CVSS7.9AI score0.00648EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/05/23 10:41 a.m.16 views

CVE-2024-46240

Collabtive 3.1 is vulnerable to Cross-site scripting XSS via the name parameter under action=system and the company/contact parameters under action=addcust within admin.php file...

4.8CVSS6.1AI score0.00347EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:58 a.m.12 views

CVE-2023-46396

Audimex 15.0.0 is vulnerable to Cross Site Scripting XSS in /audimex/cgi-bin/wal.fcgi via company parameter search filters...

5.4CVSS6AI score0.00431EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2024/12/04 8:15 a.m.9 views

CVE-2023-6978

The WP Job Manager – Company Profiles plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'company' parameter in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

6.1CVSS5.7AI score0.00285EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/12/04 12:00 a.m.21 views

PT-2024-15152 · WordPress · Wp Job Manager – Company Profiles

Name of the Vulnerable Software and Affected Versions: WP Job Manager – Company Profiles versions up to and including 1.7 Description: The issue is related to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts in pages through t...

6.1CVSS7.5AI score0.00285EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/10/22 12:00 a.m.9 views

Collabtive 跨站脚本漏洞

Collabtive is a web-based project management system. The system includes features such as project management, document management and time tracking. A security vulnerability exists in Collabtive version 3.1, which originates from a cross-site scripting attack via the name parameter when...

4.8CVSS6.2AI score0.00347EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/10/10 12:00 a.m.11 views

PT-2024-39856 · Unknown · Code-Projects Restaurant Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Restaurant Reservation System version 1.0 Description: A critical vulnerability has been found in the code-projects Restaurant Reservation System. This issue affects an unknown part of the file filter3.php. The manipulation of t...

9.8CVSS8.2AI score0.00698EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2024/10/01 12:00 a.m.9 views

Code-Projects Restaurant Reservation System SQL注入漏洞

Code-Projects Restaurant Reservation System is a Code-Projects open source restaurant reservation system. Code-Projects Restaurant Reservation System version 1.0 suffers from a SQL injection vulnerability, which originates from the parameter company in the file /updatebal.php that can lead to SQL...

9.8CVSS7.8AI score0.00797EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/10/01 12:00 a.m.13 views

Code-Projects Restaurant Reservation System SQL注入漏洞

Code-Projects Restaurant Reservation System is a Code-Projects open source restaurant reservation system . Code-Projects Restaurant Reservation System version 1.0 suffers from a SQL injection vulnerability, which originates from the parameter company in the file /addcompany.php that can lead to S...

9.8CVSS7.8AI score0.00797EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/09/30 12:00 a.m.8 views

PT-2024-39594 · Unknown · Code-Projects Restaurant Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Restaurant Reservation System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /updatebal.php. The manipulation of the company argument leads to SQL injection. This...

9.8CVSS8.1AI score0.00797EPSS
SaveExploits1References11
ATTACKERKB
ATTACKERKB
added 2023/10/25 6:17 p.m.8 views

CVE-2023-46396

Audimex 15.0.0 is vulnerable to Cross Site Scripting XSS in /audimex/cgi-bin/wal.fcgi via company parameter search filters...

5.4CVSS5.8AI score0.00431EPSS
SaveExploits1References2
OSV
OSV
added 2023/10/25 6:17 p.m.7 views

CVE-2023-46396

Audimex 15.0.0 is vulnerable to Cross Site Scripting XSS in /audimex/cgi-bin/wal.fcgi via company parameter search filters...

5.4CVSS5.8AI score0.00431EPSS
SaveExploits1References1
Prion
Prion
added 2023/10/25 6:17 p.m.19 views

Cross site scripting

Audimex 15.0.0 is vulnerable to Cross Site Scripting XSS in /audimex/cgi-bin/wal.fcgi via company parameter search filters...

4.9CVSS5.3AI score0.00431EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/10/25 12:00 a.m.31 views

CVE-2023-46396

Audimex 15.0.0 is vulnerable to Cross Site Scripting XSS in /audimex/cgi-bin/wal.fcgi via company parameter search filters...

5.5AI score0.00431EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/10/25 12:00 a.m.9 views

PT-2023-30001 · Audimex · Audimex

Name of the Vulnerable Software and Affected Versions: Audimex version 15.0.0 Description: The issue concerns Cross Site Scripting XSS in the /audimex/cgi-bin/wal.fcgi endpoint via the company parameter in search filters. Recommendations: For Audimex version 15.0.0, as a temporary workaround,...

5.4CVSS5.3AI score0.00431EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/10/25 12:00 a.m.10 views

Audimex AG AudimexEE Cross-Site Scripting Vulnerability

Audimex AG AudimexEE is a system for audit management from Audimex Ag, Germany. The system meets complex audit processes around a company's business, supports customization for use and is deployed platform-independently. A cross-site scripting vulnerability exists in Audimex version 15.0.0, which...

5.4CVSS6.1AI score0.00431EPSS
SaveExploits1References2
NVD
NVD
added 2023/09/08 6:15 p.m.20 views

CVE-2023-39712

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Put section...

6.1CVSS6.1AI score0.00583EPSS
SaveExploits0References3
Prion
Prion
added 2023/09/08 6:15 p.m.27 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Put section...

5.8CVSS6AI score0.00583EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/08 12:00 a.m.16 views

CVE-2023-39712

Multiple cross-site scripting XSS vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Put section...

6.1AI score0.00583EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/08/26 12:00 a.m.9 views

PT-2023-29570 · Sourcecodester · Sourcecodester Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A vulnerability has been found in the SourceCodester Inventory Management System, affecting an unknown functionality of the file suppliar data.php. The manipulation of the...

6.1CVSS4.3AI score0.00508EPSS
SaveExploits0References7
Rows per page
Query Builder