2783 matches found
CVE-2025-31122 scratch-coding-hut.github.io Login Links Generation vulnerability
scratch-coding-hut.github.io is the website for Coding Hut. In 1.0-beta3 and earlier, the login link can be used to login to any account by changing the username in the username field...
College Management System 安全漏洞
College Management System is a simple program. It is used to keep track of students, teachers, subjects, schedules and all things related to college. A file upload vulnerability exists in College Management System version 1.0, which stems from the lack of valid validation of the uploaded file by...
WordPress DAP to Autoresponders Email Syncing plugin <= 1.0 - Unauthenticated Information Exposure vulnerability
Unauthenticated Information Exposure vulnerability discovered by Avraham Shemesh in WordPress Plugin DAP to Autoresponders Email Syncing versions = 1.0...
Clinic Queuing System 跨站脚本漏洞
Clinic Queuing System is a clinic queuing system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in Clinic Queuing System version 1.0, which stems from a reflective cross-site scripting attack that could execute JavaScript code via a malicious URL...
Clinic Queuing System 跨站脚本漏洞
Clinic Queuing System is a clinic queuing system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in Clinic Queuing System version 1.0, which stems from a reflective cross-site scripting attack that could execute JavaScript code via a malicious URL...
WordPress plugin Frontend Post Submission 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...
CVE-2025-30569 WordPress WP Featured Entries plugin <= - 1.0 SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Jahertor WP Featured Entries wp-featured-entries allows SQL Injection.This issue affects WP Featured Entries: from n/a through = 1.0...
PHPGurukul Bank Locker Management System 注入漏洞
PHPGurukul Bank Locker Management System is a bank locker management system from PHPGurukul. An injection vulnerability exists in PHPGurukul Bank Locker Management System version 1.0, which stems from an incorrect manipulation of the parameter sadminusername that can lead to SQL injection...
AMTT Hotel Broadband Operation System 命令注入漏洞
AMTT Hotel Broadband Operation System is a hotel broadband operation system from China-based AMTT. A command injection vulnerability exists in AMTT Hotel Broadband Operation System version 1.0, which stems from an operating system command injection vulnerability...
PHPGurukul Bank Locker Management System 注入漏洞
PHPGurukul Bank Locker Management System is a bank locker management system from PHPGurukul. An injection vulnerability exists in PHPGurukul Bank Locker Management System version 1.0, which stems from an incorrect manipulation of the parameter pagetitle that can lead to SQL injection...
PHPGurukul Bank Locker Management System 注入漏洞
PHPGurukul Bank Locker Management System is a bank locker management system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Bank Locker Management System, which stems from the fact that incorrect manipulation of the parameter lockerprice can lead to SQL injecti...
PHPGurukul Online Security Guards Hiring System 注入漏洞
PHPGurukul Online Security Guards Hiring System is an online security guard hiring system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Online Security Guards Hiring System, which stems from an incorrect manipulation of the parameters fromdate/todate that can...
Code-Projects Payroll Management System 注入漏洞
Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. An injection vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect manipulation of the parameter bir that can lead to SQL injection...
SourceCodester Best Church Management Software 代码问题漏洞
SourceCodester Best Church Management Software is an open source church management software from SourceCodester. A code issue vulnerability exists in version 1.0 of SourceCodester Best Church Management Software, which stems from improper manipulation of the photo/photo1 parameter in the...
CVE-2025-29410
A cross-site scripting XSS vulnerability in the component /contact.php of Hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the txtEmail parameter...
CVE-2024-13881
The Link My Posts WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
WordPress Management-screen-droptiles plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Management-screen-droptiles versions = 1.0...
VulnCheck KEV: CVE-2024-3806
The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via the 'portoajaxposts' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in...
VulnCheck KEV: CVE-2024-3807
The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via 'portopageheadershortcodetype', 'slideshowtype' and 'postlayout' post meta. This makes it possible for authenticated attackers, with contributor-level and above permissions,...