61 matches found
CVE-2023-26982
CVE-2023-26982 취약점 설명: Trudesk v1.2.6에서 Create Ticket 기능의 Add Tags 매개변수를 통해 저장형 XSS크로스 사이트 스크립팅 취약점이 발견되었습니다. 공격 벡터: 공격자는 저장형 XSS를 악용하기 위해 티켓을 생성한 다음 티켓의 태그를 편집하고 Add Tags 입력란과 Create Tag에 XSS 페이로드를 삽입해야 합니다. XSS 페이로드는 저장 직후 실행됩니다. 영향받는 대상: http://ip:8118/tickets/ID POST /api/v1/tags/create 매개변수 ...
EUVD-2026-18139
A vulnerability was determined in SourceCodester Simple Customer Relationship Management System 1.0. This issue affects some unknown processing of the file /create-ticket.php of the component Create Ticket. This manipulation of the argument Description causes cross site scripting. Remote...
CVE-2026-5325
A vulnerability was determined in SourceCodester Simple Customer Relationship Management System 1.0. This issue affects some unknown processing of the file /create-ticket.php of the component Create Ticket. This manipulation of the argument Description causes cross site scripting. Remote...
CVE-2026-5325
CVE-2026-5325 affects SourceCodester Simple Customer Relationship Management System 1.0. The issue lies in the Create Ticket component, specifically in /create-ticket.php where manipulating the Description argument causes cross-site scripting . Remote exploitation is possible, and the exploit has...
CVE-2026-5325 SourceCodester Simple Customer Relationship Management System Create Ticket create-ticket.php cross site scripting
A vulnerability was determined in SourceCodester Simple Customer Relationship Management System 1.0. This issue affects some unknown processing of the file /create-ticket.php of the component Create Ticket. This manipulation of the argument Description causes cross site scripting. Remote...
CVE-2026-5325 SourceCodester Simple Customer Relationship Management System Create Ticket create-ticket.php cross site scripting
A vulnerability was determined in SourceCodester Simple Customer Relationship Management System 1.0. This issue affects some unknown processing of the file /create-ticket.php of the component Create Ticket. This manipulation of the argument Description causes cross site scripting. Remote...
SourceCodester Simple Customer Relationship Management System 代码注入漏洞
SourceCodester Simple Customer Relationship Management System is a simple customer relationship management system developed under open source by SourceCodester. Version 1.0 of the SourceCodester Simple Customer Relationship Management System contains a code injection vulnerability. This...
PT-2026-29685
A vulnerability was determined in SourceCodester Simple Customer Relationship Management System 1.0. This issue affects some unknown processing of the file /create-ticket.php of the component Create Ticket. This manipulation of the argument Description causes cross site scripting. Remote...
CVE-2019-12963
LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the chat.php Create Ticket Action...
CVE-2025-12264
A security flaw has been discovered in Wisencode up to 20251012. Affected by this vulnerability is an unknown functionality of the file /support-ticket/create of the component Create Support Ticket Handler. The manipulation of the argument Message results in cross site scripting. The attack may b...
EUVD-2019-4538
Malware in sbrugna...
EUVD-2023-28663
Malicious code in bioql PyPI...
EUVD-2023-28667
Malicious code in bioql PyPI...
CVE-2025-10664
A vulnerability was determined in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /create-ticket.php. Executing manipulation of the argument subject can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...
CVE-2025-10664
A vulnerability was determined in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /create-ticket.php. Executing manipulation of the argument subject can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...
CVE-2025-10664 PHPGurukul Small CRM create-ticket.php sql injection
A vulnerability was determined in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /create-ticket.php. Executing manipulation of the argument subject can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...
CVE-2025-10664
CVE-2025-10664 affects PHPGurukul Small CRM 4.0, specifically the file /create-ticket.php. The vulnerability is a SQL injection caused by unsafely handling the subject parameter in an unknown function, enabling remote exploitation. Multiple connected sources confirm that the exploit has been publ...
PT-2025-38319
Name of the Vulnerable Software and Affected Versions PHPGurukul Small CRM version 4.0 Description A SQL injection issue exists in PHPGurukul Small CRM 4.0. The issue is located in the file /create-ticket.php within an unknown function. Manipulation of the subject argument can lead to SQL...
PHPGurukul Small CRM SQL注入漏洞
Small CRM is a customer relationship management system. Small CRM suffers from a SQL injection vulnerability, which originates from the lack of validation of externally-entered SQL statements in the parameter subject in the file /create-ticket.php. An attacker can exploit this vulnerability to...