PT-2024-37311 · Unknown · Itsourcecode Online Bookstore

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Book Store versions up to 1.0 Description: A critical issue was found in the itsourcecode Online Book Store, where an unknown function of the file /edit book.php is affected. The manipulation of the image argument leads to...

Online Book Store SQL Injection Vulnerability

Online Book Store is an online bookstore by Arvin Arandilla, a personal developer. A SQL injection vulnerability exists in itsourcecode Online Book Store version 1.0, which stems from editbook.php containing an unknown function that causes SQL injection via the parameter image...

Online Discussion Forum Code Issues Vulnerabilities

Online Discussion Forum is a forum website. A code issue exists in version 1.0 of Online Discussion Forum, which originates from /members/poster.php containing an unknown function that causes unrestricted uploads via the parameter image...

Online Discussion Forum 代码问题漏洞

Online Discussion Forum is a forum website. Itsourcecode A code issue vulnerability exists in version 1.0 of Online Discussion Forum, which stems from the parameter image in the file changeprofilepicture.php that can lead to unrestricted uploads...

PT-2024-36489 · Unknown · Itsourcecode Online Discussion Forum

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Discussion Forum version 1.0 Description: A critical issue has been found in the itsourcecode Online Discussion Forum, affecting the file change profile picture.php. The manipulation of the image argument leads to...

SourceCodester Online Discussion Forum Site 代码问题漏洞

SourceCodester Online Discussion Forum Site is an application from SourceCodester, Inc. An online discussion forum. A code issue vulnerability exists in SourceCodester Online Discussion Forum Site version 1.0, which stems from an incorrect manipulation of the parameter ima that can lead to...

SchoolWebTech Code Issues Vulnerabilities

SchoolWebTech is a campus website application. A code issue vulnerability exists in SchoolWebTech version 1.0, which stems from an incorrect manipulation of the parameter image that can lead to unrestricted uploads...

CVE-2024-2663 ZD YouTube FLV Player <= 1.2.6 - Server-Side Request Forgery

The ZD YouTube FLV Player plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.2.6 via the $GET'image' parameter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web...

WordPress plugin ZD YouTube FLV Player 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

PT-2024-21432 · WordPress · Zd Youtube Flv Player

Name of the Vulnerable Software and Affected Versions: ZD YouTube FLV Player plugin for WordPress versions up to, and including, 1.2.6 Description: The issue allows unauthenticated attackers to make web requests to arbitrary locations originating from the web application, which can be used to que...

PT-2024-26380 · Byzoro · Byzoro Smart S80 Management Platform

Name of the Vulnerable Software and Affected Versions: Byzoro Smart S80 Management Platform versions up to 20240317 Description: A critical issue affects some unknown functionality of the file /useratte/userattestation.php. The manipulation of the web img argument leads to unrestricted upload. Th...

Simple Car Rental System 代码问题漏洞

Simple Car Rental System is a simple car rental application. A code issue vulnerability exists in version 1.0 of Simple Car Rental System due to a file upload vulnerability in the parameter Upload Image of the file add-vehicle.php...

Online-Book-Store-Website Code Issue Vulnerability

Online-Book-Store-Website is an online bookstore website. A code issue vulnerability exists in version 1.0 of Online-Book-Store-Website that stems from an unrestricted upload in the updateimage parameter of the /productupdate.php?update=1 file...

CVE-2024-27747

File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component...

CVE-2024-27747

File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component...

Cross site scripting

Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the image parameter in the profile.php component...

CVE-2024-27747

File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component...

Petrol Pump Management Software Cross-Site Scripting Vulnerability

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A cross-site scripting vulnerability exists in Petrol Pump Management Software version v.1.0, which originates from a vulnerability that allows an attacker to execute arbitrary code with a...

CVE-2024-27744: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the image parameter in the profile.php component...

PT-2024-22020

Name of the Vulnerable Software and Affected Versions Petrol Pump Management Software version 1.0 Description The issue allows an attacker to execute arbitrary code via a crafted payload to the image parameter in the "profile.php" component. This is a Cross Site Scripting vulnerability...