4094 matches found
CVE-2025-44183
Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting XSS in /admin/profile.php via the name, email, and mobile parameters...
LibreNMS 跨站脚本漏洞
LibreNMS is an open source network monitoring system based on PHP and MySQL from the LibreNMS community. The system features customizable alerts, auto-discovery of network environments, and automatic updates. A cross-site scripting vulnerability exists in LibreNMS 25.4.0 and earlier versions, whi...
PT-2025-21798 · Librenms · Librenms
Name of the Vulnerable Software and Affected Versions: LibreNMS versions prior to 25.5.0 Description: The issue is a Stored Cross-Site Scripting XSS vulnerability that affects the group name parameter of the "http://localhost/poller/groups" form. This allows attackers to inject malicious scripts...
D-Link DCS-932L 安全漏洞
The D-Link DCS-932L is a network surveillance camera from China AUO D-Link. It is used for security and surveillance. The D-Link DCS-932L suffers from a buffer overflow vulnerability that originates from the failure of the parameter CameraName in the file /bin/gpio to properly validate the length...
CampCodes Sales and Inventory System SQL注入漏洞
CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. The CampCodes Sales and Inventory System suffers from a SQL injection vulnerability that stems from a lack of validation of an externally entered SQL statement in the parameter Name in the file...
itsourcecode Placement Management System 注入漏洞
itsourcecode Placement Management System is an open source placement management system from itsourcecode. An injection vulnerability exists in version 1.0 of itsourcecode Placement Management System, which originates from a SQL injection due to incorrect manipulation of the parameter Name in the...
PHPGurukul Vehicle Record Management System 安全漏洞
Vehicle Record Management System is a vehicle record management system. Vehicle Record Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the brandname parameter of /admin/add-brand.php, which c...
CampCodes Sales and Inventory System 安全漏洞
CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. A security vulnerability exists in CampCodes Sales and Inventory System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter prodname in the file...
PHPGurukul Vehicle Record Management System 安全漏洞
Vehicle Record Management System is a vehicle record management system. Vehicle Record Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the name, email, and mobile parameters in...
CVE-2025-44183
The Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross-Site Scripting (XSS) in the /admin/profile.php endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data provided via the name, email, and mobile parameters. An attacker can exploit th...
CVE-2024-52290
LF Edge eKuiper is a lightweight internet of things IoT data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service e.g. kuiperUser role can inject a cross-site scripting payload into Connection Configuration key "Name" "confKey" parameter. After...
Company Visitor Management System /department.php File SQL Injection Vulnerability
Company Visitor Management System is a visitor management system. Company Visitor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter departmentname in the file /department.php. An attacke...
CVE-2025-46825
Kanboard is project management software that focuses on the Kanban methodology. Versions 1.2.26 through 1.2.44 have a Stored Cross-Site Scripting XSS Vulnerability in the "name" parameter of the "http://localhost/?controller=ProjectCreationController&action=create" form. This vulnerability allows...
CVE-2025-46825: Improper Neutralization of Input During Web Page Generation
Kanboard is project management software that focuses on the Kanban methodology. Versions 1.2.26 through 1.2.44 have a Stored Cross-Site Scripting XSS Vulnerability in the name parameter of the http://localhost/?controller=ProjectCreationController&action=create form. This vulnerability allows...
Kanboard 跨站脚本漏洞
Kanboard is a suite of open source visual task board software from Kanboard Open Source. The software has the ability to customize the panels based on the business. A cross-site scripting vulnerability exists in Kanboard versions 1.2.26 through 1.2.44, which stems from the presence of stored...
CVE-2025-4549
A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/register-router.php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has been...
CampCodes Online Food Ordering System 注入漏洞
CampCodes Online Food Ordering System is an online food ordering system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the Campcodes Online Food Ordering System, which originates from a SQL injection due to incorrect manipulation of the parameter Name in the file...
Seeyon Zhiyuan OA 路径遍历漏洞
Seeyon Zhiyuan OA Zhiyuan OA is a collaboration management software from China's Seeyon. A path traversal vulnerability exists in Seeyon Zhiyuan OA version 8.1 SP2, which arises from path traversal due to incorrect operation of the parameter Name...
Code-Projects Simple Hospital Management System 安全漏洞
Code-Projects Simple Hospital Management System is a Code-Projects open source simple hospital management system. A security vulnerability exists in Code-Projects Simple Hospital Management System version 1.0, which originates from a stack buffer overflow due to incorrect manipulation of the...