4102 matches found
PT-2024-25241
Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description The issue allows an attacker to execute arbitrary SQL commands via the name parameter in the index.php file. This can lead to unauthorized access and manipulation of...
CVE-2024-33409: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the name parameter...
CVE-2024-33409
A critical SQL injection vulnerability exists in the index.php file of campcodes Complete Web-Based School Management System 1.0 . This flaw allows an attacker to execute arbitrary SQL commands by interacting with the name parameter. The vulnerability results from improper neutralization of speci...
DEBIAN-CVE-2024-31636
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...
PYSEC-2024-280
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...
PYSEC-2024-280
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...
UBUNTU-CVE-2024-31636
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...
CVE-2024-34401
Savsoft Quiz 6.0 allows stored XSS via the index.php/quiz/insertquiz/ quizname parameter...
LIEF 安全漏洞
LIEF is a cross-platform library from the individual developer Romain Thomas. It is used to parse, modify and abstract Elf, Pe and MachO formats. A security vulnerability exists in LIEF version v.0.14.1, which stems from allowing a local attacker to obtain sensitive information via the name...
Savsoft Quiz 跨站脚本漏洞
Savsoft Quiz is a Php-based administration platform for creating online exams and tests by Savsoft individual developers. A cross-site scripting vulnerability exists in Savsoft Quiz version 6.0, which originates from allowing cross-site scripting attacks via the index.php/quiz/insertquiz/ quiznam...
PT-2024-24171 · Lief +1 · Lief +1
Name of the Vulnerable Software and Affected Versions: LIEF version 0.14.1 Description: An issue in the machd reader.c component allows a local attacker to obtain sensitive information via the name parameter. Recommendations: For LIEF version 0.14.1, consider restricting access to the name...
D-Link DIR-822+ Wireless Router Arbitrary Command Execution
The vulnerability of the ChgSambaUserSettings function in the prog.cgi script of the D-Link DIR-822+ wireless router microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the sambaname parameter. Exploiting...
PT-2024-27579 · WordPress · Blocksy
Name of the Vulnerable Software and Affected Versions: Blocksy theme for WordPress versions up to, and including, 2.0.39 Description: The issue is related to Stored Cross-Site Scripting via the className parameter in the About Me block due to insufficient input sanitization and output escaping...
WordPress Plugin Blocksy 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...
PT-2024-25195 · Sourcecodester · Sourcecodester Computer Laboratory Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Laboratory Management System version 1.0 Description: The issue is related to Cross Site Scripting XSS via the Middle Name parameter in the Create User function. This allows for potential malicious script injection...
PT-2024-19876 · WordPress · Filebird
Name of the Vulnerable Software and Affected Versions: The FileBird – WordPress Media Library Folders & File Manager plugin versions up to and including 5.6.3 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping, specifically...
CVE-2024-2345: Improper Neutralization of Input During Web Page Generation
The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the folder name parameter in all versions up to, and including, 5.6.3 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2024-33305: Improper Neutralization of Input During Web Page Generation
SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting XSS via "Middle Name" parameter in Create User...
