DTS Monitoring Operating System Command Injection Vulnerability

DTS Monitoring is an information system monitoring platform from DTS Corporation. An operating system command injection vulnerability exists in DTS Monitoring version 3.57.0, which originates from the ip parameter in the Ping check function being susceptible to operating system command injection...

CVE-2023-5018

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=savecategory of the component POST Parameter Handler. The manipulation of the argument id leads to sql injection. It is...

Sql injection

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=savecategory of the component POST Parameter Handler. The manipulation of the argument id leads to sql injection. It is...

CVE-2023-5018 SourceCodester Lost and Found Information System POST Parameter sql injection

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=savecategory of the component POST Parameter Handler. The manipulation of the argument id leads to sql injection. It is...

CVE-2023-5018 SourceCodester Lost and Found Information System POST Parameter sql injection

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=savecategory of the component POST Parameter Handler. The manipulation of the argument id leads to sql injection. It is...

CVE-2023-5018

SourceCodester Lost and Found Information System 1.0 has a SQL injection in the POST Parameter Handler, specifically via the id parameter in /classes/Master.php?f=save_category. The issue is triggered by manipulating id, enabling remote exploitation and impacting confidentiality, integrity, and a...

Lost and Found Information System SQL Injection Vulnerability

Lost and Found Information System is a lost and found information system by the individual developer oretnom23. A SQL injection vulnerability exists in Lost and Found Information System version 1.0, which originates from an unknown part of the file /classes/Master.php?f=savecategory in the...

Ericsson Mobile Switching Center Server Path Traversal Vulnerability

Ericsson Mobile Switching Center Server is Ericsson's data center server. A security vulnerability exists in Ericsson Mobile Switching Center Server that stems from a directory traversal vulnerability. Affected Products and Versions: Ericsson Mobile Switching Center Server BC version 18A, IS 3.1...

CVE-2023-38485

Vulnerabilities exist in the BIOS implementation of Aruba 9200 and 9000 Series Controllers and Gateways that could allow an attacker to execute arbitrary code early in the boot sequence. An attacker could exploit this vulnerability to gain access to and change underlying sensitive information in...

Geomatika IsiGeo Web SQL注入漏洞

Geomatika IsiGeo Web is Geomatika's geographic information system GIS software for the collection, management, analysis, and visualization of geospatial data. A security vulnerability exists in Geomatika IsiGeo Web version 6.0, which originates from a vulnerability that allows an authenticated...

CVE-2023-37070

Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting XSS...

CVE-2023-37070

Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting XSS...

CVE-2023-37070

Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting XSS...

Cross site scripting

Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting XSS...

CVE-2023-37070

Affected software: Code Projects Hospital Information System 1.0. The entry indicates a Cross Site Scripting (XSS) vulnerability in this system. The documents do not provide explicit root-cause details or affected components beyond the product/version, nor do they describe exploits or in-the-wild...

PT-2023-25784 · Unknown · Code Projects Hospital Information System

Name of the Vulnerable Software and Affected Versions: Code Projects Hospital Information System version 1.0 Description: The issue is related to Cross Site Scripting XSS, which is a type of security vulnerability that can be exploited by attackers to inject malicious scripts into websites. No...

CVE-2023-37070

Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting XSS...

Hospital Information System Cross-Site Scripting Vulnerability

Hospital Information System is a hospital information management system organized by SourceCode and Projects. A security vulnerability exists in Code Projects Hospital Information System version 1.0 that stems from a cross-site scripting XSS vulnerability...

CVE-2023-37070

Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting XSS...

CVE-2023-36159

CVE-2023-36159 affects sourcecodester Lost and Found Information System 1.0. It is a Cross Site Scripting (XSS) vulnerability exploitable via the First Name, Middle Name, and Last Name fields on the Create User page. Root cause: insufficient input validation/sanitization. Impact: remote attackers...