5201 matches found
PT-2022-20137 · Unknown · Food-Order-And-Table-Reservation-System
Name of the Vulnerable Software and Affected Versions: Food-order-and-table-reservation-system- version 1.0 Description: The issue concerns a SQL Injection vulnerability in the categorywise-menu.php file, specifically via the catid parameter. This allows for potential exploitation. Recommendation...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the getFileEntryTypeMenuItem function. An attacker can execute arbitrary web scripts or inject HTML by supplying crafted input. Details Cross-site scripting or XSS is a code vulnerability that occurs when an...
com.cooldatasoft:wicket-menu (>=6.18.0.0, <=6.18.0.4), com.cooldatasoft:wicket-menu-demo (>=6.18.0.0, <=6.18.0.4) +310 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.18.0)
org.apache.wicket:wicket-core MAVEN version 6.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.cooldatasoft:wicket-menu =6.18.0.0, =6.18.0.0, =6.18.0, =6.18.0, =6.18.0, =6.18.0, =6.18.0,...
com.cooldatasoft:wicket-menu (1.5.13.1), com.cooldatasoft:wicket-menu-demo (1.5.13.1) +204 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.13)
org.apache.wicket:wicket-core MAVEN version 1.5.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.cooldatasoft:wicket-menu 1.5.13.1 - com.cooldatasoft:wicket-menu-demo 1.5.13.1 -...
com.cooldatasoft:wicket-menu (>=6.10.0, <=6.10.0.4), com.cooldatasoft:wicket-menu-demo (>=6.10.0.0, <=6.10.0.4) +221 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.10.0)
org.apache.wicket:wicket-core MAVEN version 6.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.cooldatasoft:wicket-menu =6.10.0, =6.10.0.0, =0.2, =0.0.2, =0.1.0, =0.1.0, =3.5, =3.5, =3.9 -...
at.molindo:molindo-wicket-utils (3.0.0), com.cooldatasoft:wicket-menu (>=6.14.0.0, <=6.14.0.4) +233 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.14.0)
org.apache.wicket:wicket-core MAVEN version 6.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - at.molindo:molindo-wicket-utils 3.0.0 - com.cooldatasoft:wicket-menu =6.14.0.0, =6.14.0.0, =6.14.0,...
com.cooldatasoft:wicket-menu (>=6.20.0.0, <=6.20.0.4), com.cooldatasoft:wicket-menu-demo (>=6.20.0.0, <=6.20.0.4) +324 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.20.0)
org.apache.wicket:wicket-core MAVEN version 6.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.cooldatasoft:wicket-menu =6.20.0.0, =6.20.0.0, =6.20.0, =6.20.0, =6.20.0, =6.20.0, =6.20.0,...
com.cantaa:cantaa-commons (1.1), com.cooldatasoft:wicket-menu (>=6.16.0.0, <=6.16.0.4) +243 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.16.0)
org.apache.wicket:wicket-core MAVEN version 6.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.cantaa:cantaa-commons 1.1 - com.cooldatasoft:wicket-menu =6.16.0.0, =6.16.0.0, =1.0.0, =0.9.4,...
GHSA-RGF6-9Q7G-55QG Typo3 Function Menu API XSS Vulnerability
Cross-site scripting XSS vulnerability in the function menu API in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors...
Typo3 Function Menu API XSS Vulnerability
Cross-site scripting XSS vulnerability in the function menu API in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to inject arbitrary web script or HTML via unspecified vectors...
GeniXCMS Cross-site Scripting (XSS) via the Menu ID field
In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request...
GHSA-3C7G-P9JX-8CGM GeniXCMS Cross-site Scripting (XSS) via the Menu ID field
In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request...
CVE-2022-28930
ERP-Pro v3.7.5 was discovered to contain a SQL injection vulnerability via the component /base/SysEveMenuAuthPointMapper.xml...
ERP-Pro SQL injection vulnerabilities
ERP-Pro is a software based on SpringBoot 2.X framework, which aspires to build ERP+Production functionality that can be integrated and used with multiple systems such as OA, CRM, Knowledgebase and so on. A security vulnerability exists in ERP-Pro version 3.7.5, which can be exploited by an...
GeniXCMS Cross-site scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu...
GHSA-478J-MCRR-3877 GeniXCMS Cross-site scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu...
XSS in baserCMS before 4.1.4
An issue was discovered in baserCMS before 4.1.4. In the Register New Category feature of the Upload menu, the category name can be used for XSS via the dataUploaderCategoryname parameter to an admin/uploader/uploadercategories/edit URI...
GHSA-FX2M-5M9V-JHGP XSS in baserCMS before 4.1.4
An issue was discovered in baserCMS before 4.1.4. In the Register New Category feature of the Upload menu, the category name can be used for XSS via the dataUploaderCategoryname parameter to an admin/uploader/uploadercategories/edit URI...
