2783 matches found
CVE-2024-2483
A vulnerability, which was classified as problematic, has been found in Surya2Developer Hostel Management Service 1.0. This issue affects some unknown processing of the file /change-password.php of the component Password Change Handler. The manipulation of the argument oldpassword leads to...
CVE-2024-2406
A vulnerability, which was classified as critical, was found in Gacjie Server up to 1.0. This affects the function index of the file /app/admin/controller/Upload.php. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit ha...
Path traversal
A vulnerability was found in ZKTeco ZKBio Media 2.0.0x642024-01-29-1028. It has been classified as problematic. Affected is an unknown function of the file /pro/common/download of the component Service Port 9999. The manipulation of the argument fileName with the input ../../../../zkbiomedia.sql...
Path Traversal
paddlepaddle is vulnerable to Path Traversal. The vulnerability is due to insufficient input validation, allowing attackers to manipulate file paths and overwrite arbitrary files on the system...
Improper access control
A vulnerability was found in boyiddha Automated-Mess-Management-System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php of the component Setting Handler. The manipulation leads to improper access controls. The attack can be initiated...
CVE-2023-46169 IBM DS8900F file manipulation
IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to arbitrarily delete a file. IBM X-Force ID: 269406...
CVE-2023-46169 IBM DS8900F file manipulation
IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to arbitrarily delete a file. IBM X-Force ID: 269406...
Cross site scripting
A vulnerability was found in Bdtask Hospita AutoManager up to 20240223 and classified as problematic. This issue affects some unknown processing of the file /hospitalactivities/birth/form of the component Hospital Activities Page. The manipulation of the argument Description with the input leads ...
CVE-2024-2076
CVE-2024-2076 affects CodeAstro House Rental Management System 1.0, specifically unknown functionality in booking.php/owner.php/tenant.php. The issue is an authentication flaw that allows remote exploitation, with exploitation publicly disclosed. Connected sources consistently describe a missing ...
CVE-2024-2059 SourceCodester Petrol Pump Management Software service_crud.php unrestricted upload
A vulnerability was found in SourceCodester Petrol Pump Management Software 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/app/servicecrud.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be...
CVE-2024-0068
Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1...
CVE-2024-0068
Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1...
CVE-2024-0068
CVE-2024-0068 concerns an improper Link Resolution Before File Access (Link Following) vulnerability in HYPR Workforce Access on macOS, affecting versions prior to 8.7.1. The core issue is incorrect resolution of file access links, which can enable file manipulation. Public sources consistently i...
CVE-2024-0068
Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1...
CVE-2023-7108
A vulnerability classified as problematic has been found in code-projects E-Commerce Website 1.0. This affects an unknown part of the file usersignup.php. The manipulation of the argument firstname with the input leads to cross site scripting. It is possible to initiate the attack remotely. The...
Sql injection
A vulnerability was found in code-projects E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file usersignup.php. The manipulation of the argument firstname/middlename/email/address/contact/username leads to sql injection. The attac...
CVE-2024-0068: Improper Link Resolution Before File Access
Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1...
PT-2024-15332 · Hypr · Hypr Workforce Access
Name of the Vulnerable Software and Affected Versions: HYPR Workforce Access versions prior to 8.7.1 Description: The issue is related to an Improper Link Resolution Before File Access, also known as 'Link Following', which allows file manipulation in HYPR Workforce Access on MacOS...
CVE-2024-1925 Ctcms Upsys.php unrestricted upload
A vulnerability was found in Ctcms 2.1.2. It has been declared as critical. This vulnerability affects unknown code of the file ctcms/apps/controllers/admin/Upsys.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The complexity of an attack is rather high...