17 matches found
CVE-2023-46478
CVE-2023-46478 Minical 1.0.0 уязвим к IDOR. Вендор: https://github.com/minical/minical Демонстрационное приложение: https://demo.minical.io/ PoC Шаг 1: Я создал две учётные записи: пользователь A хакер и пользователь B walker-448 Шаг 2: Перейдите в учётную запись пользователя B, затем откройте...
EUVD-2023-37572
Malicious code in bioql PyPI...
EUVD-2023-37571
Malicious code in bioql PyPI...
CVE-2023-33409
Minical 1.0.0 is vulnerable to Cross Site Request Forgery CSRF via minical/public/application/controllers/settings/company.php...
CVE-2023-33408
Minical 1.0.0 is vulnerable to Cross Site Scripting XSS. The vulnerability exists due to insufficient input validation in the application's user input handling in the securityhelper.php file...
CVE-2023-3307
CVE-2023-3307 affects miniCal 1.0.0 with a SQL injection vulnerability in the /booking/show_bookings/ endpoint via the search_query parameter. Multiple sources confirm remote exploitation chances and public disclosure. Root cause: lack of input validation on the search_query parameter leading to ...
CVE-2023-33409
Minical 1.0.0 is vulnerable to Cross Site Request Forgery CSRF via minical/public/application/controllers/settings/company.php...
CVE-2023-33409
Minical 1.0.0 is vulnerable to Cross Site Request Forgery CSRF via minical/public/application/controllers/settings/company.php...
CVE-2023-33409
Minical 1.0.0 is vulnerable to Cross Site Request Forgery CSRF via minical/public/application/controllers/settings/company.php...
CVE-2023-33408
Minical 1.0.0 is vulnerable to Cross Site Scripting XSS. The vulnerability exists due to insufficient input validation in the application's user input handling in the securityhelper.php file...
CVE-2023-33408
Minical 1.0.0 is vulnerable to Cross Site Scripting XSS. The vulnerability exists due to insufficient input validation in the application's user input handling in the securityhelper.php file...
Cross site request forgery (csrf)
Minical 1.0.0 is vulnerable to Cross Site Request Forgery CSRF via minical/public/application/controllers/settings/company.php...
Cross site scripting
Minical 1.0.0 is vulnerable to Cross Site Scripting XSS. The vulnerability exists due to insufficient input validation in the application's user input handling in the securityhelper.php file...
CVE-2023-33409
Minical 1.0.0 is vulnerable to Cross Site Request Forgery CSRF via minical/public/application/controllers/settings/company.php...
CVE-2023-33408
Minical 1.0.0 is vulnerable to Cross Site Scripting XSS. The vulnerability exists due to insufficient input validation in the application's user input handling in the securityhelper.php file...
PT-2023-24335 · Minical · Minical
Name of the Vulnerable Software and Affected Versions: Minical version 1.0.0 Description: The issue is related to Cross Site Request Forgery CSRF via the minical/public/application/controllers/settings/company.php file. This means an attacker could potentially trick a user into performing...
