Hardcoded credentials

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

CVE-2021-42948

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

CVE-2021-42948

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

CVE-2021-42948

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

CVE-2021-42948: Cleartext Transmission of Sensitive Information

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

PT-2022-11749

Name of the Vulnerable Software and Affected Versions HotelDruid Hotel Management Software versions v3.0.3 and earlier Description The issue concerns exposed session tokens in multiple links via GET parameters, allowing attackers to access user session identifiers. Recommendations For HotelDruid...

[SECURITY] Fedora 36 Update: aron-0-0.7.20200626git7eade58.fc36

Aron is a GO script for finding hidden GET & POST parameters...

[SECURITY] Fedora 35 Update: aron-0-0.6.20200626git7eade58.fc35

Aron is a GO script for finding hidden GET & POST parameters...

RESI Gemini-Net Cross-Site Scripting Vulnerability

RESI Gemini-Net is a technology from RESI Italy for active and passive monitoring of communication networks and services.A cross-site scripting vulnerability exists in RESI Gemini-Net version 4.2. An attacker could exploit this vulnerability to inject arbitrary Web script or HTML into HTTP GET...

RESI Gemini-Net 跨站脚本漏洞

RESI Gemini-Net is a technology from RESI Italy for active and passive monitoring of communication networks and services.A cross-site scripting vulnerability exists in RESI Gemini-Net version 4.2. An attacker could exploit this vulnerability to inject arbitrary Web script or HTML into HTTP GET...

CVE-2022-29939

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\billing\sleobprocess.php leads to multiple cross-site scripting XSS vulnerabilities...

Cross site scripting

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\orders\findorderpopup.php leads to multiple cross-site scripting XSS vulnerabilities...

Cross site scripting

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\billing\sleobprocess.php leads to multiple cross-site scripting XSS vulnerabilities...

CVE-2022-29939

LibreHealth EHR 2.0.0 contains multiple XSS vulnerabilities due to lack of sanitization of GET parameters debug and InsId in interface/billing/sl_eob_process.php. The issue is documented across multiple sources (NVD, Red Hat, OSV, CVE lists) as a result of unsafely handling user-supplied input in...

CVE-2022-29940

CVE-2022-29940 affects LibreHealth EHR 2.0.0. The issue arises from insufficient sanitization of GET parameters formseq and formid in the file interface/orders/find_order_popup.php , enabling multiple XSS vulnerabilities. The connected sources confirm the vulnerable component and the underlying c...

CVE-2021-41739

A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000. Attackers can execute OS commands in cyrus.events.php with GET param logs and POST param rp...

LibreHealth EHR 跨站脚本漏洞

LibreHealth EHR is a clinically-focused electronic health record EHR system designed to be easy to use out-of-the-box or customized for use in a variety of healthcare settings. A security vulnerability exists in LibreHealth EHR 2.0.0, which stems from a missing filter escape for the GET parameter...

PT-2022-2738

Name of the Vulnerable Software and Affected Versions SICAM P850 versions prior to V3.00 SICAM P855 versions prior to V3.00 Description A vulnerability has been identified in the affected devices, which do not properly validate parameters of certain GET and POST requests. This could allow an...

Insecure Session

hoteldruid has insecure session token. The vulnerability exists due to an exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's...

Cross-site Scripting (XSS)

acs-aem-commons is vulnerable to cross-site scripting. An attacker is able to inject and execute malicious script via the a and b GET parameters in page compare when a victim with access to AEM Author visits the page...