PT-2025-2557 · Wavlink · Wavlink Ac3000

Name of the Vulnerable Software and Affected Versions: Wavlink AC3000 version M33A8.V5030.210505 Description: Multiple buffer overflow vulnerabilities exist in the internet.cgi set qos functionality. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an...

MonicaHQ 安全漏洞

MonicaHQ is a relationship management system from MonicaHQ, Inc. A security vulnerability exists in MonicaHQ version v4.1.2, which stems from the presence of client-side injection initiated via the lastname parameter in the General Information module...

CVE-2024-54999

MonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the lastname parameter the General Information module...

gymxmjpa 安全漏洞

gymxmjpa is a gym management system for liujianview individual developers. A security vulnerability exists in gymxmjpa version 1.0, which originates from an SQL injection vulnerability in the loosName parameter of the LoosDaoImpl function in the...

PT-2025-3089

Name of the Vulnerable Software and Affected Versions MonicaHQ version 4.1.2 Description The issue is a Client-Side Injection vulnerability via the last name parameter in the General Information module. This vulnerability can be exploited. Recommendations For MonicaHQ version 4.1.2, as a temporar...

PT-2025-3868 · Unknown · Reckon Sppanadmin

Name of the Vulnerable Software and Affected Versions: reckcn SPPanAdmin version 1.0 Description: A cross-site scripting issue was found in the software, allowing for remote exploitation. The manipulation of the name argument in the "/;/admin/role/edit" file leads to this issue. Other parameters...

CVE-2024-33299

Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users...

CVE-2024-42898

A cross-site scripting XSS vulnerability in Nagios XI 2024R1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Account Settings page...

CampCodes Computer Laboratory Management System 代码注入漏洞

CampCodes Computer Laboratory Management System is a computer laboratory management system from CampCodes, Inc. A code injection vulnerability exists in CampCodes Computer Laboratory Management System version 1.0, which stems from the parameter slname being susceptible to cross-site scripting...

PT-2025-2637 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI version 2024R1.1.4 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter in the Account Settings page. This enables attackers t...

Trimble SPS851 代码注入漏洞

The Trimble SPS851 is a modular GPS receiver from Trimble. A code injection vulnerability exists in the Trimble SPS851 version 488.01, which stems from the fact that incorrect manipulation of the parameter System Name can lead to cross-site scripting attacks...

CVE-2025-0197

A vulnerability classified as critical was found in code-projects Point of Sales and Inventory Management System 1.0. This vulnerability affects unknown code of the file /user/search.php. The manipulation of the argument name leads to sql injection. The attack can be initiated remotely. The explo...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS through the constructor of the Downloader class. An attacker can execute arbitrary JavaScript code in the user's browser by manipulating GET parameters name and type. Workaround This vulnerability can be mitigat...

Code-Projects Online Shop 跨站脚本漏洞

Code-Projects Online Shop is a Code-Projects open source online store system. A cross-site scripting vulnerability exists in Code-Projects Online Shop version 1.0, which originates from a cross-site scripting vulnerability in the name/details parameter of the /view.php page...

CVE-2024-13083

A vulnerability classified as problematic has been found in PHPGurukul Land Record System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument Admin Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

PHPGurukul Land Record System 代码注入漏洞

PHPGurukul Land Record System is a land management system from PHPGurukul Inc. A code injection vulnerability exists in PHPGurukul Land Record System version 1.0, which stems from the parameter Admin Name being vulnerable to cross-site scripting attacks...

Simple Chat System 代码注入漏洞

Chat System is a chat system. Chat System suffers from a cross-site scripting vulnerability that stems from a lack of sufficient validation and escaping of the name parameter input in the file /admin/updateuser.php. The vulnerability can be exploited to conduct a cross-site scripting attack by...

Hospital Management System manage-doctors.php File Cross-Site Scripting Vulnerability

Hospital Management System a hospital management system. Hospital Management System has a cross-site scripting vulnerability that originates from a cross-site scripting vulnerability in the Doctor Name parameter of the /hospital/hms/admin/manage-doctors.php file. An attacker can exploit this...

Simple Chat System 安全漏洞

Simple Chat System is a simple chat system by the individual developer nurhodelta17. A security vulnerability exists in Simple Chat System version 1.0, which stems from an incorrect manipulation of the parameters name/email/password/number that can lead to SQL injection...

Chat System update_room.php file cross-site scripting vulnerability

Chat System is a chat system. Chat System suffers from a cross-site scripting vulnerability that stems from the lack of sufficient validation and escaping of the name parameter input in the /admin/updateroom.php file. The vulnerability can be exploited to perform cross-site scripting attacks by...