863 matches found
PT-2023-22787 · Yfcmf · Yfcmf
Name of the Vulnerable Software and Affected Versions: YFCMF versions up to 3.0.4 Description: A vulnerability has been found that affects unknown code in the file index.php, leading to path traversal. The manipulation can be initiated remotely, using '../filedir' to traverse paths. The exploit h...
PT-2023-22816 · Code Projects · Agro-School Management System
Name of the Vulnerable Software and Affected Versions: code-projects Agro-School Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file index.php. The manipulation of the password argument leads to sql injection, allowing for...
SourceCodester Comment System 跨站脚本漏洞
Plohni Advanced Comment System is a comment system by Plohni Individual Developers. A cross-site scripting vulnerability exists in SourceCodester Comment System version 1.0 due to an unknown function in the file index.php in the component GET Parameter Handler, which could lead to cross-site...
PT-2023-22372 · Sofawiki · Sofawiki
Name of the Vulnerable Software and Affected Versions: SofaWiki versions prior to 3.8.10 Description: The issue is related to Cross Site Scripting XSS that can be exploited via the index.php file. Recommendations: For versions prior to 3.8.10, update to version 3.8.10 or later to resolve the issu...
lmxcms SQL注入漏洞
lmxcms dream cms is a website builder from China Dream Cms lmxcms company. A security vulnerability exists in lmxcms v1.4.1, which originates from the setbook parameter of index.php containing SQL injection...
CVE-2023-1963
A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php of the component Search. The manipulation of the argument searchinput leads to sql injection. The attack may be initiated...
PT-2023-17376 · Unknown · Phpgurukul Bank Locker Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Bank Locker Management System version 1.0 Description: A critical issue affects the Search component of the PHPGurukul Bank Locker Management System, specifically in the file index.php. The manipulation of the searchinput argument...
PT-2023-20809 · Siteproxy · Siteproxy
Name of the Vulnerable Software and Affected Versions: siteproxy version 1.0 Description: The issue is related to a path traversal vulnerability. It affects the component index.js. Recommendations: For siteproxy version 1.0, consider restricting access to the index.js component to minimize the ri...
PT-2023-17248 · Unknown · Sourcecodester Simple Task Allocation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Task Allocation System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Simple Task Allocation System, affecting an unknown function of the file index.php. The manipulation of the page...
The vulnerability of the index.php script of the PHP Xextplorer file manager allows a hacker to execute arbitrary code.
The vulnerability of the index.php script of the PHP Xextplorer file manager is related to deficiencies in access control. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
PT-2023-17039 · Unknown · Sourcecodester Alphaware Simple E-Commerce System
Name of the Vulnerable Software and Affected Versions: SourceCodester Alphaware Simple E-Commerce System version 1.0 Description: A critical issue has been found in the SourceCodester Alphaware Simple E-Commerce System, affecting an unknown part of the file admin/admin index.php. The manipulation...
PT-2023-17022 · Sourcecodester · Sourcecodester Young Entrepreneur E-Negosyo System
Name of the Vulnerable Software and Affected Versions: SourceCodester Young Entrepreneur E-Negosyo System version 1.0 Description: A problematic vulnerability has been found in the GET Parameter Handler component of the file /bsenordering/index.php. The manipulation of the category argument with...
PT-2023-16857 · Ibos · Ibos
Name of the Vulnerable Software and Affected Versions: IBOS versions up to 4.5.5 Description: A problematic issue has been found in IBOS, affecting some unknown functionality of the file mobil/index.php. The manipulation of the accesstoken argument leads to cross-site scripting. The attack can be...
dot-lens 安全漏洞
dot-lens is a JavaScript library. A security vulnerability exists in dot-lens that stems from prototype contamination of the set function in the index.js file...
pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py
A flaw was found in Python Setuptools due to a regular expression Denial of Service ReDoS present in packageindex.py. This issue could allow a remote attacker to cause a denial of service via HTML in a crafted package or custom PackageIndex page...
PT-2023-16679 · Muyucms · Muyucms
Name of the Vulnerable Software and Affected Versions: MuYuCMS version 2.2 Description: A problematic issue has been found in the processing of the file index.php, where the manipulation of the file path argument leads to path traversal. The attack can be initiated remotely. Recommendations: For...
Best pos management system 跨站脚本漏洞
Best pos management system is a best pos management system by Mayuri K. Personal developer. A cross-site scripting vulnerability exists in Best POS Management System version 1.0, which originates from the presence of an unknown function in the file index.php?page=add-category, which can be...
CVE-2023-0883
A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file /php-opos/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has...
PT-2023-16586 · Sourcecodester · Sourcecodester Online Pizza Ordering System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: A critical issue has been discovered, affecting the file /php-opos/index.php. The manipulation of the ID argument leads to SQL injection. This issue can be exploited remotel...
SUSE CVE-2018-8098
Integer overflow in the index.c:readentry function while decompressing a compressed prefix length in libgit2 before v0.26.2 allows an attacker to cause a denial of service out-of-bounds read via a crafted repository index file...