GHSA-XXM6-FF3X-V4VM thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via category field name parameter

thorsten/phpmyfaq prior to 3.1.12 is vulnerable to stored cross-site scripting XSS because it fails to sanitize user input in the category field name parameter. This has been fixed in 3.1.12...

CVE-2023-26856

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/ajax.php?action=login...

Sql injection

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/ajax.php?action=login...

PT-2023-17288 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A vulnerability was found in the software, classified as problematic. It affects some unknown functionality of the file "/admin/?page=product/manage product&id=2". The...

PT-2023-17254 · Sourcecodester · Sourcecodester Employee Payslip Generator

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Payslip Generator version 1.0 Description: A problematic vulnerability has been found in the Create News Handler component of the SourceCodester Employee Payslip Generator. The issue is related to an unknown function o...

PT-2023-17171 · Sourcecodester · Earnings/Expense Tracker App

Name of the Vulnerable Software and Affected Versions: SourceCodester Earnings and Expense Tracker App version 1.0 Description: A problematic vulnerability has been found in the software, affecting an unknown part of the file, specifically the "Master.php?a=save expense" endpoint. The manipulatio...

PT-2023-17172 · Sourcecodester · Sourcecodester Earnings/Expense Tracker App

Name of the Vulnerable Software and Affected Versions: SourceCodester Earnings and Expense Tracker App version 1.0 Description: A problematic vulnerability was found in the SourceCodester Earnings and Expense Tracker App. This issue affects the file Master.php, specifically the a parameter with t...

CVE-2023-26958

Phpgurukul Park Ticketing Management System 1.0 is vulnerable to Cross Site Scripting XSS via the Admin Name parameter...

CVE-2023-26959

Phpgurukul Park Ticketing Management System 1.0 is vulnerable to SQL Injection via the User Name parameter...

CVE-2023-26959

Phpgurukul Park Ticketing Management System 1.0 is vulnerable to SQL Injection via the User Name parameter...

CVE-2023-26958

Phpgurukul Park Ticketing Management System 1.0 is vulnerable to Cross Site Scripting XSS via the Admin Name parameter...

PT-2023-20876 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: Phpgurukul Park Ticketing Management System version 1.0 Description: The issue is related to Cross Site Scripting XSS via the Admin Name parameter. This allows for potential malicious script injection, affecting the security of the system...

Phpgurukul Park Ticketing Management System SQL注入漏洞

PHPGurukul Park Ticketing Management System is a park ticketing management system from PHPGurukul, Inc. A security vulnerability exists in version 1.0 of the Phpgurukul Park Ticketing Management System, which stems from a discovery containing a SQL injection attack via the User Name parameter...

Phpgurukul Park Ticketing Management System 跨站脚本漏洞

PHPGurukul Park Ticketing Management System is a park ticketing management system from PHPGurukul, Inc. A security vulnerability exists in version 1.0 of the Phpgurukul Park Ticketing Management System, which was discovered to contain a cross-site scripting XSS vulnerability via the Admin Name...

CVE-2023-26958

Phpgurukul Park Ticketing Management System 1.0 is affected by a Cross Site Scripting (XSS) vulnerability exploitable via the Admin Name parameter. The issue is documented across multiple sources, with Red Hat and other feeds confirming XSS in version 1.0. The root cause is unvalidated input for ...

PT-2023-20877 · Unknown · Phpgurukul Park Ticketing Management System

Name of the Vulnerable Software and Affected Versions: Phpgurukul Park Ticketing Management System version 1.0 Description: The issue is related to SQL Injection via the User Name parameter. This allows for potential exploitation. No information is provided about the estimated number of potential...

CVE-2022-28491

TOTOLink outdoor CPE CP900 V6.3c.566B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the hostname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2023-24655

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function...

PT-2023-19728 · Unknown · Simple Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management System version 1.0 Description: A SQL injection issue was found in the Profile Update function, specifically via the name parameter. Recommendations: For Simple Customer Relationship Management System...

PT-2023-12943 · Totolink · Totolink Outdoor Cpe Cp900

Name of the Vulnerable Software and Affected Versions: TOTOLink outdoor CPE CP900 version 6.3c.566 B20171026 Description: The issue concerns a command injection vulnerability in the NTPSyncWithHost function via the host name parameter. This allows attackers to execute arbitrary commands via a...