705 matches found
CVE-2020-36002
Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database information...
CVE-2021-3293
emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file...
Emlog 路径遍历漏洞
emlog is a powerful blog and CMS builder based on PHP and MySQL. A path traversal vulnerability exists in t/index.php in emlog 5.3.1. An attacker can exploit this vulnerability to view the path to webroot/file...
Oliver Lando College-Management-System-Php SQL Injection Vulnerability
Oliver Lando College-Management-System-Php is a college management system organized by Oliver Lando Personal Organization in Kenya. This College Management System is an Internet-based Web portal designed to provide information for all management systems of the college. College Management System P...
CVE-2020-35396
EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting XSS via the index.php. An Attacker is able to inject the XSS payload in the web application each time a user visits the website...
Sourcecodester Car Rental Management System Input Validation Error Vulnerability
Sourcecodester Car Rental Management System is a car rental management system from Sourcecodester USA. A security vulnerability exists in version 1.0 of the SourceCodester Car Rental Management System, which can be exploited by an unauthenticated user to perform a file inclusion attack on the...
CVE-2020-29227
An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, to cause local file inclusion resulting in code execution...
SourceCodester Gym Management System Cross-Site Scripting Vulnerability
SourceCodester Gym Management System is the American SourceCodester company's a gym management system. The system by C and sql server for the development of technology, with customer and supplier management, product management, sales management, gym membership management, fitness assessment, syst...
CVE-2020-12281
iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php...
CVE-2020-23833
Projectworlds House Rental v1.0 suffers from an unauthenticated SQL Injection vulnerability, allowing remote attackers to execute arbitrary code on the hosting webserver via a malicious index.php POST request...
DBHcms Cross-Site Request Forgery Vulnerability
DBHcms is a small, free and open source content management system for personal and small business websites. DBHcms 1.2.0 suffers from a cross-site request forgery vulnerability. An attacker can exploit this vulnerability to add users via index.php?dbhcmspid=-70...
CVE-2020-19889
DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for index.php?dbhcmspid=-70 can add a user...
CVE-2020-8641
Lotus Core CMS 1.0.1 allows authenticated Local File Inclusion of .php files via directory traversal in the index.php pageslug parameter...
Centreon Security Feature Issue Vulnerability
Centreon Merethis Centreon is an open source IT monitoring software package from Centreon France that needs to be used with Nagios. The software enables the management of Nagios via the Web, as well as the monitoring of networks, operating systems and applications via third-party components. A...
PT-2019-13870 · Mitsubishi · Me-Rtu
Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Europe B.V. ME-RTU devices versions 2.02 and earlier INEA ME-RTU devices versions 3.0 and earlier Description: An issue allows an attacker to inject malicious code directly into the application through stored cross-site...
CVE-2019-17608
HongCMS 3.0.0 has XSS via the install/index.php dbname parameter...
CVE-2019-17609
HongCMS 3.0.0 has XSS via the install/index.php dbusername parameter...
CVE-2019-17611
HongCMS 3.0.0 has XSS via the install/index.php tableprefix parameter...