1494 matches found
CVE-2023-50071
Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...
CVE-2023-50071
Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...
CVE-2023-50070
Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...
CVE-2023-50070
Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=saveticket via departmentid, customerid, and subject...
Sql injection
Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...
CVE-2023-50071
Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customersupport/ajax.php?action=savedepartment via id or name...
PT-2023-31467
Name of the Vulnerable Software and Affected Versions Sourcecodester Customer Support System version 1.0 Description The issue concerns multiple SQL injection vulnerabilities in the /customer support/ajax.php?action=save ticket endpoint via department id, customer id, and subject. This allows for...
BlackCat Ransomware Raises Ante After FBI Disruption
The U.S. Federal Bureau of Investigation FBI disclosed today that it infiltrated the worlds second most prolific ransomware gang, a Russia-based criminal group known as ALPHV and BlackCat. The FBI said it seized the gangs darknet website, and released a decryption tool that hundreds of victim...
Exploit for SQL Injection in Customer_Support_System_Project Customer_Support_System
CVE-2023-50071 Customer Support System 1.0 - Multiple SQL in...
Exploit for SQL Injection in Oretnom23 Customer_Support_System
CVE-2023-50070 Customer Support System 1.0 - Multiple SQL in...
Ten Years Later, New Clues in the Target Breach
On Dec. 18, 2013, KrebsOnSecurity broke the news that U.S. retail giant Target was battling a wide-ranging computer intrusion that compromised more than 40 million customer payment cards over the previous month. The malware used in the Target breach included the text string "Rescator," which also...
Cross-site Scripting (XSS)
jfinal is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the modal management department of the library, allowing an attacker to inject and execute malicious JavaScript...
Cross site scripting
Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting XSS vulnerability in the article management department...
Cross site scripting
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the model management department...
CVE-2023-49487
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...
CVE-2023-49485
CVE-2023-49485 concerns JFinalCMS v5.0.0, with a cross-site scripting (XSS) vulnerability in the column management department. The original description and connected documents consistently identify the affected software as JFinalCMS v5.0.0 and attribute the issue to inadequate filtering/escaping ...
CVE-2023-49486: Improper Neutralization of Input During Web Page Generation
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the model management department...
CVE-2023-49487: Improper Neutralization of Input During Web Page Generation
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...
CVE-2023-49486
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the model management department...
CVE-2023-49484: Improper Neutralization of Input During Web Page Generation
Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting XSS vulnerability in the article management department...