185 matches found
CVE-2025-22599
WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the home.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msgc parameter. This vulnerability is fixed in 3.2.8...
JMBroadcast JMB0150 Firmware 安全漏洞
JMBroadcast JMB0150 Firmware is a firmware from JMBroadcast. A security vulnerability exists in JMBroadcast JMB0150 Firmware version v1.0, which stems from improper access control of the HOME.php endpoint, which could lead to unauthorized access to the administration panel...
CVE-2025-28232: Improper Access Control
Incorrect access control in the HOME.php endpoint of JMBroadcast JMB0150 Firmware v1.0 allows attackers to access the Admin panel without authentication...
CVE-2025-29390
jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the setpassword function in application/controllers/home.php...
CVE-2025-29390
jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the setpassword function in application/controllers/home.php...
CVE-2025-29390
jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the setpassword function in application/controllers/home.php...
CVE-2025-29390
jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the setpassword function in application/controllers/home.php...
CVE-2025-29390
jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the setpassword function in application/controllers/home.php...
CVE-2025-29390: Improper Neutralization of Special Elements used in an SQL Command
jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the setpassword function in application/controllers/home.php...
CVE-2025-1742
A vulnerability, which was classified as problematic, has been found in pihome-shc PiHome 2.0. Affected by this issue is some unknown functionality of the file /home.php. The manipulation of the argument pagename leads to cross site scripting. The attack may be launched remotely. The exploit has...
CVE-2025-1742
CVE-2025-1742 affects pihome-shc PiHome 2.0. The vulnerability resides in unknown functionality of /home.php, where manipulating the page_name argument results in cross-site scripting. It is described as exploitable remotely and with public disclosure of the exploit. Connected sources corroborate...
CVE-2025-1742: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in pihome-shc PiHome 2.0. Affected by this issue is some unknown functionality of the file /home.php. The manipulation of the argument pagename leads to cross site scripting. The attack may be launched remotely. The exploit has...
PT-2025-8975
Name of the Vulnerable Software and Affected Versions PiHome version 2.0 Description A problematic issue has been found in PiHome, affecting some unknown functionality of the file /home.php. The manipulation of the page name argument leads to cross-site scripting. This issue can be exploited...
CVE-2025-22599
WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the home.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msgc parameter. This vulnerability is fixed in 3.2.8...
CVE-2025-22599
The CVE-2025-22599 issue affects the WeGIA web manager (WeGIA) and relates to a Reflected Cross-Site Scripting (XSS) vulnerability in the home.php endpoint via the msg_c parameter. The root cause is a reflected XSS flaw that allows injection of malicious scripts. Affected versions are prior to 3....
CVE-2025-22599
WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the home.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msgc parameter. This vulnerability is fixed in 3.2.8...
CVE-2025-22599 WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `home.php` parameter `msg_c`
WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the home.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msgc parameter. This vulnerability is fixed in 3.2.8...
CVE-2025-22599 WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `home.php` parameter `msg_c`
WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the home.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msgc parameter. This vulnerability is fixed in 3.2.8...
CVE-2025-22599: Improper Neutralization of Input During Web Page Generation
WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability was identified in the home.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msgc parameter. This vulnerability is fixed in 3.2.8...