180 matches found
CVE-2024-8141 SourceCodester Daily Calories Monitoring Tool add-calorie.php cross site scripting
A vulnerability was found in SourceCodester Daily Calories Monitoring Tool 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-calorie.php. The manipulation of the argument caloriedate/caloriename leads to cross site scripting. It is possible to...
CVE-2024-8141
Vulnerability: SourceCodester Daily Calories Monitoring Tool 1.0 has a cross-site scripting flaw in /endpoint/add-calorie.php through manipulated calorie_date/calorie_name parameters. Impact per sources is client-side injection with remote exploit potential; exploit has been publicly disclosed. A...
SourceCodester Daily Calories Monitoring Tool 跨站脚本漏洞
SourceCodester Daily Calories Monitoring Tool is a daily calories monitoring tool from SourceCodester, Inc. A cross-site scripting vulnerability exists in version 1.0 of the SourceCodester Daily Calories Monitoring Tool, which stems from a cross-site scripting vulnerability in the...
CVE-2024-40472
Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php."...
CVE-2024-40472
SourceCodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via delete-calorie.php. Multiple sources (NVD, Red Hat, CNNVD, CVE lists, PT Security) confirm an injection flaw in the PHP/MySQL component, enabling data disclosure/integrity/availability impact per CVSS scores (hi...
CVE-2024-40472
Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php."...
CVE-2024-5134 SourceCodester Electricity Consumption Monitoring Tool delete-bill.php sql injection
A vulnerability was found in SourceCodester Electricity Consumption Monitoring Tool 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-bill.php. The manipulation of the argument bill leads to sql injection. The attack can be initiated...
CVE-2024-5134 SourceCodester Electricity Consumption Monitoring Tool delete-bill.php sql injection
A vulnerability was found in SourceCodester Electricity Consumption Monitoring Tool 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-bill.php. The manipulation of the argument bill leads to sql injection. The attack can be initiated...
PT-2024-34602 · Sourcecodester · Sourcecodester Electricity Consumption Monitoring Tool
Name of the Vulnerable Software and Affected Versions: SourceCodester Electricity Consumption Monitoring Tool version 1.0 Description: A critical issue has been identified, affecting the /endpoint/delete-bill.php file. The manipulation of the bill argument leads to SQL injection. This issue can b...
CVE-2024-27082
Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 are vulnerable to stored cross-site scripting, a type of cross-site scripting where malicious scripts are permanently stored on a target server and served to users who access a particular...
Cacti 安全漏洞
Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti team. The tool fetches data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. A security vulnerability exists in Cacti versions prior to 1.2.27, which...
Cacti 安全漏洞
Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. A security vulnerability exists in Cacti versions prior to 1.2.27, which...
[SECURITY] Fedora 40 Update: tcpdump-4.99.4-7.fc40
Tcpdump is a command-line tool for monitoring network traffic. Tcpdump can capture and display the packet headers on a particular network interface or on all interfaces. Tcpdump can display all of the packet headers, or just the ones that match particular criteria. Install tcpdump if you need a...
The vulnerability of the monitoringwizard.php file, a monitoring tool for IT infrastructure, allows a malicious actor to execute arbitrary SQL queries.
The vulnerability of the monitoringwizard.php file, a tool for monitoring IT infrastructure, relates to the possibility of embedding commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
The vulnerability of the monitoring tool for VMware Aria Operations lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.
The vulnerability of the monitoring tool for VMware Aria Operations is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the monitoring tool for VMware Aria Operations, related to the lack of protective measures for the website structure, allows attackers to execute cross-site scripting attacks (XSS).
The vulnerability of the monitoring tool for VMware Aria Operations is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of the monitoring tool for VMware Aria Operations, related to errors in privilege management, allows a perpetrator to escalate their privileges.
The vulnerability of the monitoring tool for VMware Aria Operations is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CVE-2023-49804 Uptime Kuma Password Change Vulnerability
Uptime Kuma is an easy-to-use self-hosted monitoring tool. Prior to version 1.23.9, when a user changes their login password in Uptime Kuma, a previously logged-in user retains access without being logged out. This behavior persists consistently, even after system restarts or browser restarts. Th...
The vulnerability of the monitoring and security management tool Trend Micro Apex Central lies in the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks.
The vulnerability of the monitoring and security management tool Trend Micro Apex Central exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks remotely...
CVE-2023-49276
Uptime Kuma is an open source self-hosted monitoring tool. In affected versions the Google Analytics element in vulnerable to Attribute Injection leading to Cross-Site-Scripting XSS. Since the custom status interface can set an independent Google Analytics ID and the template has not been...