Simple Cashiering System 跨站脚本漏洞

Simple Cashiering System is a simple open source cashiering system by Carlo Montero personal developer. It is used to help businesses manage their daily transactions. A security vulnerability exists in Simple Cashiering System, which stems from some unknown handling of the user account handler, a...

PT-2022-24974 · Unknown · Sourcecodester Simple Cashiering System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Simple Cashiering System affected versions not specified Description: A problematic issue has been found in the User Account Handler component, where the manipulation of the fullname argument leads to cross-site scripting. The...

CVE-2022-3364 No limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3...

CVE-2022-3364 No limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3...

No limit in length of "Fullname" parameter results in DOS attack /memory corruption

Proof of Concept 1Go to https://rdiffweb-dev.ikus-soft.com/prefs/general endpoint . 2You will see a field called "Fullname" 3Here you will see that there is no limit for the "Fullname" parameter that allows a user to to set a very long string as long as 1 million characters . 4This may possibly...

CVE-2022-40028

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter...

CVE-2022-40028

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter...

Simple Task Managing System 跨站脚本漏洞

Simple Task Managing System is a simple task management system. A security vulnerability exists in Simple Task Managing System v1.0, which is caused by a cross-site scripting vulnerability in the fullName parameter of the newProjectValidation.php component...

CVE-2022-36254

Multiple persistent cross-site scripting XSS vulnerabilities in index.php in tramyardg Hotel Management System 1.0 allow remote attackers to inject arbitrary web script or HTML via multiple parameters such as "fullname"...

PT-2022-23273 · Unknown · Tramyardg Hotel Management System

Name of the Vulnerable Software and Affected Versions: tramyardg Hotel Management System version 1.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML via multiple parameters such as fullname in index.php, enabling persistent cross-site scripting XSS attacks...

The vulnerability of the add-directory.php component of the Directory Management System allows a hacker to execute arbitrary SQL commands.

The vulnerability of the add-directory.php component of the Directory Management System relates to the ability to execute commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely, using the fullname parameter...

CVE-2022-31384

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php...

CVE-2022-31384

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php...

Sql injection

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php...

CVE-2022-31384

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php...

PT-2022-3051

Name of the Vulnerable Software and Affected Versions Directory Management System version 1.0 Description The issue is related to a SQL injection vulnerability in the add-directory.php component of the Directory Management System. This vulnerability can be exploited by a remote attacker to execut...

Directory Management System SQL注入漏洞

Directory Management System is a directory management system. A SQL injection vulnerability exists in Directory Management System v1.0, which stems from a lack of validation of the fullname parameter in add-directory.php against an externally-entered SQL statement. An attacker can exploit this...

CVE-2021-46362

A Server-Side Template Injection SSTI vulnerability in the Registration and Forgotten Password forms of Magnolia v6.2.3 and below allows attackers to execute arbitrary code via a crafted payload entered into the fullname parameter...

Sql injection

A Server-Side Template Injection SSTI vulnerability in the Registration and Forgotten Password forms of Magnolia v6.2.3 and below allows attackers to execute arbitrary code via a crafted payload entered into the fullname parameter...

PT-2022-12670 · Magnolia · Magnolia

Name of the Vulnerable Software and Affected Versions: Magnolia versions prior to 6.2.3 Description: A Server-Side Template Injection SSTI issue in the Registration and Forgotten Password forms allows attackers to execute arbitrary code via a crafted payload entered into the fullname parameter...