CVE-2024-44759

An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44758

An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...

CVE-2024-44759: Improper Neutralization of Special Elements used in an OS Command

An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44758

The NUS-M9 ERP Management Software v3.0.0 is affected by an arbitrary file upload vulnerability in the /Production/UploadFile component. This flaw allows an attacker to execute arbitrary code by uploading specially crafted files. To mitigate this risk, it is recommended to disable the /Production...

CVE-2024-44759

An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44758

An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...

CVE-2024-44759

The NUS-M9 ERP Management Software v3.0.0 is affected by an arbitrary file download vulnerability in the /Doc/DownloadFile component. Attackers can exploit this by sending a crafted interface request to download arbitrary files and access sensitive information . As a temporary workaround, it is r...

CVE-2024-44759

An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to download arbitrary files and access sensitive information via a crafted interface request...

CVE-2024-44758: Improper Control of Generation of Code

An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 allows attackers to execute arbitrary code via uploading crafted files...

nus-systems.de Improper Access Control vulnerability OBB-3776941

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

gifts.yale-nus.edu.sg Cross Site Scripting vulnerability OBB-1471151

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

nus.org.uk XSS vulnerability

Vulnerable URL: http://www.nus.org.uk/en/advice/?news-search=%22%3E%3Cimg%20src=%22x%22%20onerror=%22alert%27openbugbounty%27%22;%3E&news-search-submit;=Search Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:13 GMT Vulnerability type:| XSS...

南大之星信息发布系统 search_video.asp等6处 SQL注入漏洞

No description provided by source...

nus newssystem 1.02 - (id) SQL Injection Vulnerability

No description provided by source. .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. NUs Newssystem 1.02 id SQL Injection Vulnerability .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. + Autor: n3w7u + Page: http://www.internet-works.de/home.html +...

CVE-2010-5060

SQL injection vulnerability in Nus.php in NUs Newssystem 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in Nus.php in NUs Newssystem 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-5060

Summary: CVE-2010-5060 is a SQL injection vulnerability in the Nus.php file of NUs Newssystem 1.02 , exploitable via the id parameter to allow remote attackers to execute arbitrary SQL commands. The fault is a database-related injection in the affected component, leading to potential partial to f...

CVE-2010-5060: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Nus.php in NUs Newssystem 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2011-1995

Name of the Vulnerable Software and Affected Versions NUs Newssystem version 1.02 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the Nus.php file. Recommendations For version 1.02, avoid using the id parameter in the...

NUs Newssystem 1.02 SQL Injection

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. NUs Newssystem 1.02 id SQL Injection Vulnerability .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. + Autor: n3w7u + Page: http://www.internet-works.de/home.html + Source:...