3255 matches found
WordPress plugin BuddyPress 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
Campcodes Complete Web-Based School Management System 跨站脚本漏洞
Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which stems from a cross-site scripting vulnerability in the...
Campcodes Complete Web-Based School Management System 跨站脚本漏洞
Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which stems from a cross-site scripting vulnerability in the...
Web-School ERP 跨站脚本漏洞
Web-School ERP is an application from Web-School India, Inc. An ERP application. A cross-site scripting vulnerability exists in School ERP Pro+Responsive version 1.0, which originates from a cross-site scripting vulnerability in the /schoolerp/officeadmin/ page for the esbankacc, esbankname,...
CVE-2024-34231
CVE-2024-34231 affects Sourcecodester Laboratory Management System v1.0 with a cross-site scripting (XSS) flaw exploitable via a crafted payload in the System Short Name parameter. The issue enables attackers to execute arbitrary web scripts or HTML, with CVSSv3.1 base score 7.1 (HIGH) and user i...
PT-2024-32996 · Ruijie · Ruijie Rg-Uac
Name of the Vulnerable Software and Affected Versions: Ruijie RG-UAC versions prior to 20240507 Description: A critical vulnerability exists in Ruijie RG-UAC. The manipulation of the name argument in an unknown function of the file /view/networkConfig/physicalInterface/interface commit.php leads ...
PT-2024-32437 · Campcodes · Campcodes Complete Web-Based School Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A problematic issue was found in the system, affecting the /model/update grade.php file. The manipulation of the name argument leads to cross-site scripting. This...
PT-2024-32501 · Campcodes · Campcodes Legal Case Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Legal Case Management System version 1.0 Description: A problem was found in the processing of the file /admin/expense-type, where the manipulation of the name argument leads to cross-site scripting. This issue can be exploited...
PT-2024-32453 · Campcodes · Campcodes Complete Web-Based School Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A issue was found in the processing of the file /model/update classroom.php, where the manipulation of the name argument leads to cross-site scripting. This issue...
PT-2024-22376 · Unknown · Sourcecodester School Task Manager
Name of the Vulnerable Software and Affected Versions: Sourcecodester School Task Manager version 1.0 Description: A vulnerability was identified within the subject name= parameter, enabling Stored Cross-Site Scripting XSS attacks. This issue allows attackers to manipulate the subject's name,...
PT-2024-22375 · Unknown · Sourcecodester School Task Manager
Name of the Vulnerable Software and Affected Versions: Sourcecodester School Task Manager version 1.0 Description: The issue is related to Cross Site Scripting XSS via the add-task.php endpoint, specifically the task name parameter. This allows for potential malicious script injection. No...
PT-2024-28655 · WordPress · Buddypress
Name of the Vulnerable Software and Affected Versions: BuddyPress plugin for WordPress versions up to and including 12.4.0 Description: The issue arises from insufficient input sanitization and output escaping, allowing authenticated attackers with subscriber-level permissions and above to inject...
PT-2024-32022
Name of the Vulnerable Software and Affected Versions BlueNet Technology Clinical Browsing System version 1.2.1 Description A critical issue exists in BlueNet Technology Clinical Browsing System version 1.2.1 related to SQL injection. The issue affects an unknown functionality within the...
Logpoint 安全漏洞
Logpoint is a network security application from the Danish company Logpoint. A security vulnerability exists in Logpoint versions prior to 7.4.0, which stems from the fact that the sourcename parameter can be changed to an absolute path, which will write a CSV file to the tmp directory...
CVE-2024-33409
SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter...
CVE-2024-33409
SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter...
CVE-2024-33409
CVE-2024-33409 describes an SQL injection in the Campcodes Complete Web-Based School Management System 1.0. The vulnerable component is the index.php and the name parameter; the underlying cause is improper input handling enabling arbitrary SQL execution. Documents indicate a high-severity impact...
PYSEC-2024-280
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...