Codezips Hospital Appointment System 安全漏洞

Codezips Hospital Appointment System is an open source hospital appointment system from Codezips. A security vulnerability exists in Codezips Hospital Appointment System version 1.0, which originates from an SQL injection in the parameter Name...

CVE-2024-10741

A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file /Users/registration.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2024-10700

A vulnerability was found in code-projects University Event Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file submit.php. The manipulation of the argument name/email/title/Year/gender/fromdate/todate/people leads to sql injection. The...

CVE-2024-51430

Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary code via the Test Name parameter on the diagnostic/add-test.php component...

CVE-2024-51430

Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary code via the Test Name parameter on the diagnostic/add-test.php component...

PT-2024-34632 · Unknown · Online Diagnostic Lab Management System Using Php

Name of the Vulnerable Software and Affected Versions: online diagnostic lab management system using php version 1.0 Description: The issue is related to a Cross Site Scripting XSS vulnerability. It allows a remote attacker to execute arbitrary code via the Test Name parameter on the...

CVE-2024-51430

Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary code via the Test Name parameter on the diagnostic/add-test.php component...

CVE-2024-51430: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary code via the Test Name parameter on the diagnostic/add-test.php component...

SourceCodester Online Diagnostic Lab Management System 安全漏洞

SourceCodester Online Diagnostic Lab Management System is an online diagnostic lab management system from SourceCodester open source. A security vulnerability exists in SourceCodester Online Diagnostic Lab Management System version v.1.0. A remote attacker can exploit this vulnerability to execut...

EnGenius ESR580 安全漏洞

The EnGenius ESR580 is a series of wireless access points from EnGenius. A security vulnerability exists in the EnGenius ESR580 version 1.1.30 and earlier, which stems from a stored cross-site scripting attack that allows remote attackers to conduct a stored cross-site scripting attack via the...

PT-2024-8535 · NetGear · Netgear Xr300

Name of the Vulnerable Software and Affected Versions: Netgear XR300 version 1.0.3.78 Description: The issue is related to a command injection vulnerability in the system name parameter at the "wiz dyn.cgi" endpoint. This vulnerability can be exploited by sending a specially crafted request,...

PT-2024-8390 · NetGear · Netgear R8500

Name of the Vulnerable Software and Affected Versions: Netgear R8500 version 1.0.2.160 Description: The issue is related to a command injection vulnerability in the share name parameter at the "usb remote smb conf.cgi" endpoint. This vulnerability allows attackers to execute arbitrary OS commands...

PT-2024-9032 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR 823G version 1.0.2B05 Description: The issue is related to a command injection vulnerability via the HostName parameter in the SetWanSettings function. This allows attackers to execute arbitrary OS commands via a crafted request. T...

PHPGurukul Vehicle Record System 跨站脚本漏洞

PHPGurukul Vehicle Record System is a vehicle record management system from PHPGurukul. A cross-site scripting vulnerability exists in PHPGurukul Vehicle Record System version 1.0, which originates from a cross-site scripting vulnerability in the Brand Name parameter of the /admin/edit-brand.php...

The vulnerability in the `usb_remote_smb_conf.cgi` script of NETGEAR XR1000 Wi-Fi routers allows a hacker to execute arbitrary commands.

The vulnerability in the usbremotesmbconf.cgi script of NETGEAR XR1000 Wi-Fi routers lies in the lack of measures for sanitizing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the sharename parameter...

CVE-2024-48707

Collabtive 3.1 is vulnerable to Cross-site scripting XSS via the name parameter under a action=add or action=edit within managemilestone.php file and b action=addpro within admin.php file...

CVE-2024-48708

Collabtive 3.1 is vulnerable to Cross-Site Scripting XSS via the name parameter in a file tasklist.php under action = add/edit and in b file admin.php under action = adduser/edituser...

CVE-2024-48707

Collabtive 3.1 is vulnerable to Cross-site scripting XSS via the name parameter under a action=add or action=edit within managemilestone.php file and b action=addpro within admin.php file...

UBUNTU-CVE-2024-48707

Collabtive 3.1 is vulnerable to Cross-site scripting XSS via the name parameter under a action=add or action=edit within managemilestone.php file and b action=addpro within admin.php file...

UBUNTU-CVE-2024-48708

Collabtive 3.1 is vulnerable to Cross-Site Scripting XSS via the name parameter in a file tasklist.php under action = add/edit and in b file admin.php under action = adduser/edituser...