44 matches found
PT-2024-37626 · Sourcecodester · Sourcecodester Home Owners Collection Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Home Owners Collection Management System version 1.0 Description: A critical issue affects the processing of the file /classes/Users.php?f=save, allowing unrestricted upload through the manipulation of the img argument. This ca...
PT-2024-37508 · Sourcecodester · Sourcecodester Simple Online Bidding System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Bidding System version 1.0 Description: A critical issue affects the /admin/ajax.php?action=save settings file, where the manipulation of the img argument leads to unrestricted upload. This can be initiated...
PT-2024-33348 · Sourcecodester · Sourcecodester Employee/Visitor Gate Pass Logging System
Name of the Vulnerable Software and Affected Versions: SourceCodester Employee and Visitor Gate Pass Logging System version 1.0 Description: A critical vulnerability has been found in the system, affecting an unknown function of the file /employee gatepass/classes/Users.php?f=ssave. The...
PT-2024-18963 · Sourcecodester · Sourcecodester Best Pos Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Best POS Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file admin class.php. The manipulation of the img argument leads to sql injection. It is possibl...
Best POS Management System SQL Injection Vulnerability
Best pos management system is a best pos management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Best POS Management System version 1.0, which originates from a SQL injection vulnerability in the parameter img of the file adminclass.php...
PT-2024-18900 · Unknown · Sourcecodester Online Mobile Management Store
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Mobile Management Store version 1.0 Description: A critical vulnerability has been found in the software, affecting an unknown part of the file /classes/Users.php. The manipulation of the img argument leads to unrestrict...
CVE-2023-3970
A vulnerability, which was classified as problematic, was found in GZ Scripts Availability Booking Calendar PHP 1.0. This affects an unknown part of the file /index.php?controller=GzUser&action=edit&id=1 of the component Image Handler. The manipulation of the argument img leads to cross site...
CVE-2023-3970
A vulnerability, which was classified as problematic, was found in GZ Scripts Availability Booking Calendar PHP 1.0. This affects an unknown part of the file /index.php?controller=GzUser&action=edit&id=1 of the component Image Handler. The manipulation of the argument img leads to cross site...
Availability Booking Calendar PHP 跨站脚本漏洞
Availability Booking Calendar PHP is a GZ Scripts open source availability booking calendar system . A cross-site scripting vulnerability exists in GZ Scripts Availability Booking Calendar PHP version 1.0, which stems from the parameter img in the file /index.php?controller=GzUser&action=edit&id=...
OTCMS 安全漏洞
OTCMS Nettie CMS is a content management system CMS for article-based websites. A security vulnerability exists in OTCMS versions prior to 6.62, which stems from an incorrect operation of the parameter img that results in path traversal...
PT-2023-23768 · Otcms · Otcms
Name of the Vulnerable Software and Affected Versions: OTCMS versions up to 6.62 Description: A problematic issue was found in OTCMS. It affects an unknown function of the file admin/readDeal.php, specifically the API endpoint "admin/readDeal.php?mudi=readQrCode". The manipulation of the img...
PT-2023-18512 · Sourcecodester · Sourcecodester Online Pizza Ordering System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: A critical issue has been found in the SourceCodester Online Pizza Ordering System, affecting the file admin/ajax.php?action=save settings. The manipulation of the img...
PT-2023-16949 · Unknown · Sourcecodester Online Tours & Travels Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A vulnerability was found in the SourceCodester Online Tours & Travels Management System, allowing for unrestricted upload due to the manipulation of the img...
Online Tours & Travels Management System 代码问题漏洞
Online Tours & Travels Management System is an online tours management system by Mayuri K. Individual developer. A code issue exists in SourceCodester Online Tours & Travels Management System version 1.0, which is caused by an unknown function in the file admin/ab.php, which causes unrestricted...
PT-2023-16629 · Sourcecodester · Sourcecodester Best Pos Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Best POS Management System version 1.0 Description: A problematic issue has been found in the Image Handler component, affecting the function save settings of the file "index.php?page=site settings". The manipulation of the...
CVE-2019-12348
An issue was discovered in zzcms 2019. SQL Injection exists in user/ztconfig.php via the daohang or img POST parameter...
Schools Alert Management Script Arbitrary File Deletion Vulnerability
PHP Scripts Mall Schools Alert Management Script is a school management system script by PHP Scripts Mall India. A security vulnerability exists in PHP Scripts Mall Schools Alert Management Script. The vulnerability can be exploited to delete arbitrary files using the 'img' parameter in the...
CVE-2018-12053
Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in deleteimg.php by using directory traversal...
CVE-2014-9734
CVE-2014-9734 describes a directory traversal vulnerability in the WordPress plugin for Slider Revolution (revslider) prior to 4.2. An attacker can cause a revslider_show_image action to wp-admin/admin-ajax.php with a .. in the img parameter to read arbitrary server files. Affected: Slider Revolu...