PT-2022-26353 · Unknown · Sourcecodester Book Store Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Book Store Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Book Store Management System, affecting unknown code of the file /bsms ci/index.php. This issue leads to improper...

CVE-2022-44139

Apartment Visitor Management System v1.0 is vulnerable to SQL Injection via /avms/index.php...

SeaCMS SQL注入漏洞

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A SQL injection vulnerability exists in versions of SeaCMS prior to v12.6, which stems from its /js/player/dmplayer/dmku/index.php component that...

Media Links routers 授权问题漏洞

Media Links routers are a series of wireless routers from the Japanese company Media Links. Media Links routers contain an authorization issue vulnerability that originates from unknown code in index.asp, which can be exploited by an attacker to bypass the login screen and gain unauthorized acces...

Expense Management System 跨站脚本漏洞

Expense Management System is an expense management system by Carlo Montero Personal Developer. A security vulnerability exists in Expense Management System version 1.0, which stems from a stored cross-site scripting XSS vulnerability that allows arbitrary JavaScript commands to be executed via...

CVE-2022-37191

The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user can read system files via crafted POST request using function parameter value as LFI payload...

CuppaCMS 安全漏洞

CuppaCMS is a content management system CMS. A security vulnerability exists in CuppaCMS version 1.0, which stems from the vulnerability of the component cuppa/api/index.php to LFI attacks...

CVE-2022-38269

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/modstudent/index.php?view=edit&id=...

PT-2022-20607 · Sourcecodester · Sourcecodester Clinics Patient Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinics Patient Management System affected versions not specified Description: A critical issue was found in the Login component of the system, specifically in the file index.php. The user name argument is vulnerable to sql...

CVE-2022-36748

PicUploader v2.6.3 was discovered to contain a cross-site scripting XSS vulnerability via the component /master/index.php...

PT-2022-19213 · Sourcecodester · Sourcecodester Student Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Management System affected versions not specified Description: A critical issue was found in the SourceCodester Student Management System, affecting an unknown function of the file index.php. The manipulation of the id...

Guest Management System SQL注入漏洞

Guest Management System is a web-based system designed to monitor the records of everyone entering a school or college. The Guest Management System suffers from a SQL injection vulnerability that stems from unknown code in its index.php component that manipulates the parameters username/pass to...

The vulnerability of the /index.php file of the SourceCodester Online Admission System allows a attacker to perform XSS attacks.

The vulnerability of the /index.php file of the SourceCodester Online Admission System exists due to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

PT-2022-18556 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Loan Management System affected versions not specified Description: A critical issue affects some unknown functionality of the file /index.php. The manipulation of the password argument leads to SQL injection. The attack can be...

Online Admission System 跨站脚本漏洞

Online Admission System is an online admission system by the individual developer RASHMI KUMARI. A cross-site scripting vulnerability exists in the Online Admission System, which originates from an unknown function in its component index.php that passes a special string to the parameter eid,...

ffmpeg-sdk 命令注入漏洞

ffmpeg-sdk is a ffmpeg wrapper for nodejs by the individual developer Shajan Jacob in India. A security vulnerability exists in ffmpeg-sdk, which stems from the vulnerability of index.js to command injection attacks...

CVE-2022-30625

Directory listing is a web server function that displays the directory contents when there is no index file in a specific website directory. A directory listing provides an attacker with the complete index of all the resources located inside of the directory. The specific risks and consequences...

Directory traversal

Directory listing is a web server function that displays the directory contents when there is no index file in a specific website directory. A directory listing provides an attacker with the complete index of all the resources located inside of the directory. The specific risks and consequences...

CVE-2022-30625 Chcnav - P5E GNSS Directory listing

Directory listing is a web server function that displays the directory contents when there is no index file in a specific website directory. A directory listing provides an attacker with the complete index of all the resources located inside of the directory. The specific risks and consequences...

CVE-2022-30625

Directory listing is a web server function that displays the directory contents when there is no index file in a specific website directory. A directory listing provides an attacker with the complete index of all the resources located inside of the directory. The specific risks and consequences...