PT-2023-12632 · Sourcecodester · Sourcecodester Royale Event Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Royale Event Management System version 1.0 Description: A problematic issue has been found in the system, affecting an unknown function of the file /royal event/companyprofile.php. The manipulation of the companyname, regno,...

CVE-2022-44870

A reflected cross-site scripting XSS vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...

Cross site scripting

A reflected cross-site scripting XSS vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...

PT-2023-14563 · Maccms10 · Maccms10

Name of the Vulnerable Software and Affected Versions: maccms10 version 2022.1000.3032 Description: A reflected cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...

PT-2023-10107 · Unknown · License To Kill

Name of the Vulnerable Software and Affected Versions: License to Kill affected versions not specified Description: A critical issue was found in License to Kill, affecting an unknown part of the file models/injury.rb. The manipulation of the name argument leads to sql injection. Recommendations:...

CVE-2022-47119

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the ssid parameter at /goform/WifiBasicSet...

CVE-2022-46582

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the loginname parameter in the dographauth sub4061E0 function...

CVE-2022-46582

TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the loginname parameter in the dographauth sub4061E0 function...

PT-2022-6628 · Lexmark · Lexmark

Name of the Vulnerable Software and Affected Versions: Lexmark devices through 2023-02-19 Description: The issue is related to accessing a resource by using an incompatible type, which can lead to remote code execution. This is associated with the pagemaker microprogram software of Lexmark...

PT-2022-28097 · Unknown · Heimdall Application Dashboard

Name of the Vulnerable Software and Affected Versions: Heimdall Application Dashboard versions 2.5.4 and earlier Description: The issue allows for reflected and stored Cross-Site Scripting XSS attacks via the Application name variable to the "Add application" page. The stored XSS will be triggere...

Bank Management System 跨站脚本漏洞

Bank Management System is a bank management system. A cross-site scripting vulnerability exists in SourceCodester Blood Bank Management System version 1.0, which stems from an unknown function in the index.php?page=users file of its User Registration Handler component that operates on the paramet...

Concourse 安全漏洞

Concourse is an automated system written in Go by Concourse Open Source. A security vulnerability exists in Concourse versions prior to 7.x.y through 7.8.3 and versions prior to 6.x.y through 6.7.9, which stems from the ability of its users to send a request with a request body...

ctrlo lenio 跨站脚本漏洞

lenio is an open source facility management system from ctrlo. A security vulnerability exists in ctrlo lenio that stems from an unknown section of its views/index.tt file that operates on the parameters task.name/task.site.org.name allowing attackers to implement cross-site scripting...

Tenda AC6 form_fast_setting_wifi_set function buffer overflow vulnerability

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps. The Tenda AC6 suffers from a buffer overflow vulnerability that stems from the lack of length validation of input data by the ssid parameter in the...

CVE-2021-34181

Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...

TomExam 跨站脚本漏洞

TomExam is a free and efficient online exam system software. TomExam version 3.0 suffers from a cross-site scripting XSS vulnerability that can be exploited by an attacker to cause cross-site scripting XSS via the pname parameter passed to list.thtml...

PT-2022-10325 · Tomexam · Tomexam

Name of the Vulnerable Software and Affected Versions: TomExam version 3.0 Description: The issue is a Cross Site Scripting XSS vulnerability. It can be exploited via the p name parameter in the "list.thtml" endpoint. This allows for malicious script execution. Recommendations: For TomExam versio...

Cross site scripting

A cross-site scripting XSS vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the Add New System User module...

Book Store Management System 跨站脚本漏洞

Book Store Management System is an online bookstore system by Carlo Montero, an individual developer. A security vulnerability exists in Book Store Management System v1.0.0, which stems from the Name parameter of its Add New System User module, which allows an attacker to execute arbitrary web...

PT-2022-27589 · Tenda · Tenda Ac6V1.0

Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: A buffer overflow issue was discovered via the devName parameter in the formSetDeviceName function. This issue can be exploited, potentially allowing unauthorized access or control...