PT-2023-27994 · Csz Cms · Csz Cms

Name of the Vulnerable Software and Affected Versions: CSZ CMS version 1.3.0 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Database Username or Database Host parameters in the install/index.php file. This enables the...

PT-2023-30466 · Unknown · Sourcecodester Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file index.php. The manipulation of the page argument leads to file inclusion. This issue can b...

CVE-2023-40752

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Make an Offer Widget v1.0...

CVE-2023-40748

PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php...

Yacht Listing Script 跨站脚本漏洞

Yacht Listing Script is yacht and boat categorization software. A security vulnerability exists in PHPJabbers Yacht Listing Script v1.0, which is caused by a cross-site scripting vulnerability in the "action" parameter of the index.php file...

CVE-2023-4371

A vulnerability was found in phpRecDB 1.3.1. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument r/view leads to cross site scripting. The attack may be launched remotely. VDB-237194 is the identifier...

CVE-2023-36315

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widget v1.0...

PT-2023-25531 · Phpjabbers · Phpjabbers Callback Widget

Name of the Vulnerable Software and Affected Versions: PHPJabbers Callback Widget version 1.0 Description: There is a Cross Site Scripting XSS issue in the action parameter of the "index.php" file. This allows for potential malicious script execution. Recommendations: For PHPJabbers Callback Widg...

CVE-2023-4113

A vulnerability was found in PHP Jabbers Service Booking Script 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument index leads to cross site scripting. The attack can be initiated remotely. The identifier of...

CVE-2023-4111

A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index/pickupid leads to cross site scripting. The attack may be launched remotely...

CVE-2023-4110

A vulnerability has been found in PHP Jabbers Availability Booking Calendar 5.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument sessionid leads to cross site scripting. The attack can be launched...

PT-2023-27803 · Phpjabbers · Php Jabbers Shuttle Booking

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Shuttle Booking Software version 1.0 Description: A vulnerability was found in the software, classified as problematic, affecting an unknown part of the file /index.php. The manipulation leads to cross site scripting, and it is...

Taxi Booking Cross-Site Scripting Vulnerability

Taxi Booking is a PHP Jabbers open source cab booking software. A cross-site scripting vulnerability exists in PHP Jabbers Taxi Booking version 2.0, which stems from the parameter index in the file /index.php that causes cross-site scripting...

CVE-2023-3988

A vulnerability was found in Cafe Billing System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php of the component Order Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely...

PT-2023-27140 · Unknown · Cafe Billing System

Name of the Vulnerable Software and Affected Versions: Cafe Billing System version 1.0 Description: A critical issue was found in the Cafe Billing System, affecting an unknown functionality of the file index.php of the component Order Handler. The manipulation of the id argument leads to SQL...

Availability Booking Calendar PHP 跨站脚本漏洞

Availability Booking Calendar PHP is GZ Scripts open source an availability booking calendar system . Availability Booking Calendar PHP v1.0 version of a cross-site scripting vulnerability , the vulnerability stems from the file index.php parameter promocode on the user-supplied data lack of...

PT-2023-25232 · Unknown · Gz Scripts Php Crm Platform

Name of the Vulnerable Software and Affected Versions: GZ Scripts PHP CRM Platform version 1.8 Description: A vulnerability has been found in the GZ Scripts PHP CRM Platform, classified as problematic. This issue affects unknown code of the file /index.php. The manipulation of the action argument...

PT-2023-11562 · Ljcms · Ljcms

Name of the Vulnerable Software and Affected Versions: LJCMS version 4.3.R60321 Description: The issue allows a remote attacker to execute arbitrary code. This is achieved via the "ljcms/index.php" parameter. Recommendations: For version 4.3.R60321, consider restricting access to the...

CVE-2023-3062

A vulnerability was found in code-projects Agro-School Management System 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument password leads to sql injection. It is possible to launch the attack remotely. The identifier o...

Agro-School Management System SQL注入漏洞

Agro-School Management System is an agricultural school management system. A SQL injection vulnerability exists in Agro-School Management System version 1.0, which originates from an unknown function in index.php that causes a sql injection via the parameter password...