Online Catering Reservation System SQL注入漏洞

Online Catering Reservation System is an open source online catering reservation system. SourceCodester Online Catering Reservation System version 1.0 has a SQL injection vulnerability, the vulnerability stems from a problem in the file /reservation/addmessage.php, the operation of the parameter...

PT-2023-16754 · Sourcecodester · Sourcecodester Online Catering Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Catering Reservation System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Online Catering Reservation System. This issue affects the file /reservation/add message.php of the...

CVE-2023-23157

A stored cross-site scripting XSS vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullname parameter on the enquiry page...

CVE-2023-23157

A stored cross-site scripting XSS vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullname parameter on the enquiry page...

PT-2023-18864 · Unknown · Art Gallery Management System Project

Name of the Vulnerable Software and Affected Versions: Art Gallery Management System Project version 1.0 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullname parameter on the enquiry page...

SUSE CVE-2013-4885

The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted FullName parameter in a response, as demonstrated using directory traversal sequences...

PT-2022-27736 · Unknown · Sourcecodester Covid-19 Directory On Vaccination System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Covid-19 Directory on Vaccination System version 1.0 Description: A Cross site scripting XSS issue allows attackers to execute arbitrary code via the txtfullname parameter or txtphone parameter to "register.php" without...

Web-Based Student Clearance System 跨站脚本漏洞

Web-Based Student Clearance System is a web-based student clearance system by the individual developer Ndueso Okorie. A security vulnerability exists in Web-Based Student Clearance System version v1.0, which was discovered to contain a cross-site scripting XSS vulnerability via...

CVE-2022-3949

A vulnerability, which was classified as problematic, has been found in Sourcecodester Simple Cashiering System. This issue affects some unknown processing of the component User Account Handler. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated...

Simple Cashiering System 跨站脚本漏洞

Simple Cashiering System is a simple open source cashiering system by Carlo Montero personal developer. It is used to help businesses manage their daily transactions. A security vulnerability exists in Simple Cashiering System, which stems from some unknown handling of the user account handler, a...

PT-2022-24974 · Unknown · Sourcecodester Simple Cashiering System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Simple Cashiering System affected versions not specified Description: A problematic issue has been found in the User Account Handler component, where the manipulation of the fullname argument leads to cross-site scripting. The...

Security update for cacti, cacti-spine (moderate)

openSUSE Security Update: Security update for cacti, cacti-spine Announcement ID: openSUSE-SU-2022:10170-1 Rating: moderate References: 1203952 Affected Products: SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12-SP3 SUSE Linux...

rdiffweb's unlimited length Fullname field can lead to DoS

rdiffweb prior to 2.5.0a3 does not validate email length, allowing users to insert an email longer than 255 characters. If a user signs up with an email with a length of 1 million or more characters and logs in, withdraws, or changes their email, the server may cause denial of service due to...

CVE-2022-3364 No limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3...

CVE-2022-3364 No limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3...

No limit in length of "Fullname" parameter results in DOS attack /memory corruption

Proof of Concept 1Go to https://rdiffweb-dev.ikus-soft.com/prefs/general endpoint . 2You will see a field called "Fullname" 3Here you will see that there is no limit for the "Fullname" parameter that allows a user to to set a very long string as long as 1 million characters . 4This may possibly...

CVE-2022-40028

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter...

CVE-2022-40028

SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component newProjectValidation.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullName parameter...

Simple Task Managing System 跨站脚本漏洞

Simple Task Managing System is a simple task management system. A security vulnerability exists in Simple Task Managing System v1.0, which is caused by a cross-site scripting vulnerability in the fullName parameter of the newProjectValidation.php component...

CVE-2022-36254

Multiple persistent cross-site scripting XSS vulnerabilities in index.php in tramyardg Hotel Management System 1.0 allow remote attackers to inject arbitrary web script or HTML via multiple parameters such as "fullname"...