CVE-2022-23525: NULL Pointer Dereference

Helm is a tool for managing Charts, pre-configured Kubernetes resources. Versions prior to 3.10.3 are subject to NULL Pointer Dereference in the repopackage. The repo package contains a handler that processes the index file of a repository. For example, the Helm client adds references to chart...

Helm vulnerable to denial of service through through repository index file

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the repo package that can cause a segmentation violation. Applications that use functions from the repo package in the Helm SDK can have a Denial of Service attack when they use this package and it panics...

GHSA-53C4-HHMH-VW5Q Helm vulnerable to denial of service through through repository index file

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the repo package that can cause a segmentation violation. Applications that use functions from the repo package in the Helm SDK can have a Denial of Service attack when they use this package and it panics...

Helm vulnerable to denial of service through through repository index file

Fuzz testing, by Ada Logics and sponsored by the CNCF, identified input to functions in the repo package that can cause a segmentation violation. Applications that use functions from the repo package in the Helm SDK can have a Denial of Service attack when they use this package and it panics...

PT-2022-27234

Name of the Vulnerable Software and Affected Versions sproctor php-calendar affected versions not specified Description A problematic vulnerability was found in sproctor php-calendar, affecting an unknown part of the file index.php. The manipulation of the argument $ SERVER'PHP SELF' leads to cro...

PHP-Calendar 跨站脚本漏洞

PHP-Calendar is a calendar application by Sean Proctor Individual Developer. PHP-Calendar suffers from a code injection vulnerability that originates in an unknown section of the component index.php, where manipulation of the parameter $SERVER PHPSELF can lead to cross-site scripting...

PT-2022-26353 · Unknown · Sourcecodester Book Store Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Book Store Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Book Store Management System, affecting unknown code of the file /bsms ci/index.php. This issue leads to improper...

CVE-2022-44139

Apartment Visitor Management System v1.0 is vulnerable to SQL Injection via /avms/index.php...

SeaCMS SQL注入漏洞

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A SQL injection vulnerability exists in versions of SeaCMS prior to v12.6, which stems from its /js/player/dmplayer/dmku/index.php component that...

Media Links routers 授权问题漏洞

Media Links routers are a series of wireless routers from the Japanese company Media Links. Media Links routers contain an authorization issue vulnerability that originates from unknown code in index.asp, which can be exploited by an attacker to bypass the login screen and gain unauthorized acces...

Expense Management System 跨站脚本漏洞

Expense Management System is an expense management system by Carlo Montero Personal Developer. A security vulnerability exists in Expense Management System version 1.0, which stems from a stored cross-site scripting XSS vulnerability that allows arbitrary JavaScript commands to be executed via...

CVE-2022-37191

The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user can read system files via crafted POST request using function parameter value as LFI payload...

CuppaCMS 安全漏洞

CuppaCMS is a content management system CMS. A security vulnerability exists in CuppaCMS version 1.0, which stems from the vulnerability of the component cuppa/api/index.php to LFI attacks...

CVE-2022-38269

School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/modstudent/index.php?view=edit&id=...

PT-2022-20607 · Sourcecodester · Sourcecodester Clinics Patient Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinics Patient Management System affected versions not specified Description: A critical issue was found in the Login component of the system, specifically in the file index.php. The user name argument is vulnerable to sql...

CVE-2022-36748

PicUploader v2.6.3 was discovered to contain a cross-site scripting XSS vulnerability via the component /master/index.php...

PT-2022-19213 · Sourcecodester · Sourcecodester Student Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Management System affected versions not specified Description: A critical issue was found in the SourceCodester Student Management System, affecting an unknown function of the file index.php. The manipulation of the id...

Guest Management System SQL注入漏洞

Guest Management System is a web-based system designed to monitor the records of everyone entering a school or college. The Guest Management System suffers from a SQL injection vulnerability that stems from unknown code in its index.php component that manipulates the parameters username/pass to...

The vulnerability of the /index.php file of the SourceCodester Online Admission System allows a attacker to perform XSS attacks.

The vulnerability of the /index.php file of the SourceCodester Online Admission System exists due to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

PT-2022-18556 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Loan Management System affected versions not specified Description: A critical issue affects some unknown functionality of the file /index.php. The manipulation of the password argument leads to SQL injection. The attack can be...