3263 matches found
CVE-2025-60314
Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting XSS due to the lack of input sanitization on the product name parameter Nombre:Producto allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript...
CVE-2025-60298
Novel-Plus up to 5.2.4 was discovered to contain a Stored Cross-Site Scripting XSS vulnerability via the /author/updateIndexName endpoint. This vulnerability allows authenticated attackers to inject malicious JavaScript code through the indexName parameter, which gets stored in the database and...
CVE-2025-11474 SourceCodester Hotel and Lodge Management System edit_booking.php sql injection
A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /editbooking.php. Performing manipulation of the argument Name results in sql injection. The attack can be initiated remotely. The exploit has...
SourceCodester Student Grades Management System 安全漏洞
SourceCodester Student Grades Management System is a SourceCodester open source student grades management system. A security vulnerability exists in SourceCodester Student Grades Management System version 1.0, which originates from an incorrect manipulation of the parameters firstname and lastnam...
PT-2025-41291
Name of the Vulnerable Software and Affected Versions SourceCodester Farm Management System version 1.0 Description A flaw exists in SourceCodester Farm Management System 1.0 related to the manipulation of the Name argument within the /buyNow.php file, leading to a SQL injection condition. This...
Novel-Plus 安全漏洞
Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. A security vulnerability exists in Novel-Plus versions 5.2.4 and earlier, which stems from unvalidated input of the indexName parameter and could lead to a stored cross-site scripting attack...
code-projects E-Commerce Website SQL注入漏洞
E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter prodname in the file /pages/productadd.php. An attacker can exploit this vulnerability to...
CVE-2025-60314
Summary : CVE-2025-60314 affects Configuroweb Sistema Web de Inventario 1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) caused by the lack of input sanitization on the product name parameter (Nombre:Producto). An authenticated attacker can inject malicious JavaScript payloads and ex...
CVE-2025-11336
A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. Affected by this issue is some unknown functionality of the file /stAlarmConfigure/index.do/../../aloneReport/download.do;otherlogout.do. Such manipulation of the argument fileName leads...
EUVD-2025-32697
A security flaw has been discovered in code-projects Simple Banking System 1.0. This issue affects some unknown processing of the file /createuser.php. Performing manipulation of the argument Name results in sql injection. The attack may be initiated remotely. The exploit has been released to the...
EUVD-2017-7350
Malware in sbrugna...
EUVD-2005-0692
Malware in sbrugna...
EUVD-2018-21583
Malware in sbrugna...
EUVD-2021-26529
Malware in sbrugna...
EUVD-2013-7232
Malware in sbrugna...
EUVD-2018-19439
Malware in sbrugna...
EUVD-2002-1932
Malware in sbrugna...
EUVD-2018-10804
Malware in sbrugna...