Availability Booking Calendar PHP 跨站脚本漏洞

Availability Booking Calendar PHP is GZ Scripts open source an availability booking calendar system . Availability Booking Calendar PHP v1.0 version of a cross-site scripting vulnerability , the vulnerability stems from the file index.php parameter promocode on the user-supplied data lack of...

PT-2023-25232 · Unknown · Gz Scripts Php Crm Platform

Name of the Vulnerable Software and Affected Versions: GZ Scripts PHP CRM Platform version 1.8 Description: A vulnerability has been found in the GZ Scripts PHP CRM Platform, classified as problematic. This issue affects unknown code of the file /index.php. The manipulation of the action argument...

PT-2023-11562 · Ljcms · Ljcms

Name of the Vulnerable Software and Affected Versions: LJCMS version 4.3.R60321 Description: The issue allows a remote attacker to execute arbitrary code. This is achieved via the "ljcms/index.php" parameter. Recommendations: For version 4.3.R60321, consider restricting access to the...

CVE-2023-3062

A vulnerability was found in code-projects Agro-School Management System 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument password leads to sql injection. It is possible to launch the attack remotely. The identifier o...

Agro-School Management System SQL注入漏洞

Agro-School Management System is an agricultural school management system. A SQL injection vulnerability exists in Agro-School Management System version 1.0, which originates from an unknown function in index.php that causes a sql injection via the parameter password...

PT-2023-22787 · Yfcmf · Yfcmf

Name of the Vulnerable Software and Affected Versions: YFCMF versions up to 3.0.4 Description: A vulnerability has been found that affects unknown code in the file index.php, leading to path traversal. The manipulation can be initiated remotely, using '../filedir' to traverse paths. The exploit h...

PT-2023-22816 · Code Projects · Agro-School Management System

Name of the Vulnerable Software and Affected Versions: code-projects Agro-School Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file index.php. The manipulation of the password argument leads to sql injection, allowing for...

SourceCodester Comment System 跨站脚本漏洞

Plohni Advanced Comment System is a comment system by Plohni Individual Developers. A cross-site scripting vulnerability exists in SourceCodester Comment System version 1.0 due to an unknown function in the file index.php in the component GET Parameter Handler, which could lead to cross-site...

PT-2023-22372 · Sofawiki · Sofawiki

Name of the Vulnerable Software and Affected Versions: SofaWiki versions prior to 3.8.10 Description: The issue is related to Cross Site Scripting XSS that can be exploited via the index.php file. Recommendations: For versions prior to 3.8.10, update to version 3.8.10 or later to resolve the issu...

lmxcms SQL注入漏洞

lmxcms dream cms is a website builder from China Dream Cms lmxcms company. A security vulnerability exists in lmxcms v1.4.1, which originates from the setbook parameter of index.php containing SQL injection...

CVE-2023-1963

A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php of the component Search. The manipulation of the argument searchinput leads to sql injection. The attack may be initiated...

PT-2023-17376 · Unknown · Phpgurukul Bank Locker Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Bank Locker Management System version 1.0 Description: A critical issue affects the Search component of the PHPGurukul Bank Locker Management System, specifically in the file index.php. The manipulation of the searchinput argument...

PT-2023-20809 · Siteproxy · Siteproxy

Name of the Vulnerable Software and Affected Versions: siteproxy version 1.0 Description: The issue is related to a path traversal vulnerability. It affects the component index.js. Recommendations: For siteproxy version 1.0, consider restricting access to the index.js component to minimize the ri...

PT-2023-17248 · Unknown · Sourcecodester Simple Task Allocation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Task Allocation System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Simple Task Allocation System, affecting an unknown function of the file index.php. The manipulation of the page...

The vulnerability of the index.php script of the PHP Xextplorer file manager allows a hacker to execute arbitrary code.

The vulnerability of the index.php script of the PHP Xextplorer file manager is related to deficiencies in access control. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

PT-2023-17039 · Unknown · Sourcecodester Alphaware Simple E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester Alphaware Simple E-Commerce System version 1.0 Description: A critical issue has been found in the SourceCodester Alphaware Simple E-Commerce System, affecting an unknown part of the file admin/admin index.php. The manipulation...

PT-2023-17022 · Sourcecodester · Sourcecodester Young Entrepreneur E-Negosyo System

Name of the Vulnerable Software and Affected Versions: SourceCodester Young Entrepreneur E-Negosyo System version 1.0 Description: A problematic vulnerability has been found in the GET Parameter Handler component of the file /bsenordering/index.php. The manipulation of the category argument with...

PT-2023-16857 · Ibos · Ibos

Name of the Vulnerable Software and Affected Versions: IBOS versions up to 4.5.5 Description: A problematic issue has been found in IBOS, affecting some unknown functionality of the file mobil/index.php. The manipulation of the accesstoken argument leads to cross-site scripting. The attack can be...

dot-lens 安全漏洞

dot-lens is a JavaScript library. A security vulnerability exists in dot-lens that stems from prototype contamination of the set function in the index.js file...

pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py

A flaw was found in Python Setuptools due to a regular expression Denial of Service ReDoS present in packageindex.py. This issue could allow a remote attacker to cause a denial of service via HTML in a crafted package or custom PackageIndex page...