CVE-2023-3833: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Bug Finder Montage 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site scripting. The attack...

CVE-2023-3832: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Bug Finder Wedding Wonders 1.0. It has been classified as problematic. Affected is an unknown function of the file /user/ticket/create of the component Ticket Handler. The manipulation of the argument message leads to cross site scripting. It is possible to launch the...

CVE-2023-3830: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Bug Finder SASS BILLER 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /company/store. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. The associated identifier of...

CVE-2023-3829: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Bug Finder ICOGenie 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user/ticket/create of the component Support Ticket Handler. The manipulation of the argument message leads to cross site scripting. The attack can be...

Listplace Directory Listing Platform 3.0 File Upload / Cross Site Scripting

Exploit Title: Listplace Directory Listing Platform 3.0 - Arbitrary File Upload Exploit Author: CraCkEr Date: 12/07/2023 Vendor: Bug Finder Vendor Homepage: https://bugfinder.net/ Software Link: https://bugfinder.net/product/listplace-a-complete-directory-listing-platform/22 Tested on: Windows 10...

CVE-2023-3796

A vulnerability, which was classified as problematic, has been found in Bug Finder Foody Friend 1.0. Affected by this issue is some unknown functionality of the file /user/profile of the component Profile Picture Handler. The manipulation of the argument profilepicture leads to unrestricted uploa...

CVE-2023-3795

A vulnerability classified as critical was found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Affected by this vulnerability is an unknown functionality of the file /property of the component GET Parameter Handler. The manipulation of the argument name leads to sql injection. The...

CVE-2023-3796

A vulnerability, which was classified as problematic, has been found in Bug Finder Foody Friend 1.0. Affected by this issue is some unknown functionality of the file /user/profile of the component Profile Picture Handler. The manipulation of the argument profilepicture leads to unrestricted uploa...

Out-of-bounds

A vulnerability, which was classified as problematic, has been found in Bug Finder Foody Friend 1.0. Affected by this issue is some unknown functionality of the file /user/profile of the component Profile Picture Handler. The manipulation of the argument profilepicture leads to unrestricted uploa...

CVE-2023-3796

CVE-2023-3796 affects Bug Finder Foody Friend 1.0, specifically the Profile Picture Handler’s /user/profile and the profile_picture parameter. The issue permits unrestricted file uploads via remote access, as described across multiple feeds (NVD, Red Hat, CVE records, and industry sources). The v...

CVE-2023-3795

CVE-2023-3795 affects Bug Finder ChainCity Real Estate Investment Platform 1.0. The vulnerability is a SQL injection in the file handling the GET Parameter Handler for the /property endpoint, caused by manipulation of the name argument. Documented impact is high confidentiality, integrity, and av...

Cross site scripting

A vulnerability classified as problematic has been found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Affected is an unknown function of the file /chaincity/user/ticket/create of the component New Ticket Handler. The manipulation of the argument subject leads to cross site...

CVE-2023-3794 Bug Finder ChainCity Real Estate Investment Platform New Ticket create cross site scripting

A vulnerability classified as problematic has been found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Affected is an unknown function of the file /chaincity/user/ticket/create of the component New Ticket Handler. The manipulation of the argument subject leads to cross site...

CVE-2023-3794

Summary (CVE-2023-3794): A cross-site scripting vulnerability affects Bug Finder ChainCity Real Estate Investment Platform 1.0, in the component New Ticket Handler (file path /chaincity/user/ticket/create ). Manipulation of the argument subject leads to XSS, with remote exploitation possible. Aff...

Bug Finder ChainCity Real Estate Investment Platform SQL注入漏洞

Bug Finder ChainCity Real Estate Investment Platform is a real estate investment platform from Bug Finder, Inc. A SQL injection vulnerability exists in Bug Finder ChainCity Real Estate Investment Platform version 1.0, which stems from the parameter name of the component GET Parameter Handler that...

CVE-2023-3794: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Affected is an unknown function of the file /chaincity/user/ticket/create of the component New Ticket Handler. The manipulation of the argument subject leads to cross site...

CVE-2023-3796: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as problematic, has been found in Bug Finder Foody Friend 1.0. Affected by this issue is some unknown functionality of the file /user/profile of the component Profile Picture Handler. The manipulation of the argument profilepicture leads to unrestricted uploa...

CVE-2023-3795: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Affected by this vulnerability is an unknown functionality of the file /property of the component GET Parameter Handler. The manipulation of the argument name leads to sql injection. The...

PT-2023-26208 · Unknown · Bug Finder Foody Friend

Name of the Vulnerable Software and Affected Versions: Bug Finder Foody Friend version 1.0 Description: A problematic issue has been found in the Profile Picture Handler component, affecting some unknown functionality of the file /user/profile. The manipulation of the profile picture argument lea...

CVE-2023-3751

A vulnerability was found in Super Store Finder 3.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component POST Parameter Handler. The manipulation of the argument products leads to sql injection. The attack can be...