WordPress plugin Easy Digital Downloads 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A CSV injection vulnerabili...

Event Registration App 安全漏洞

Event Registration App is a JavaScript application for registering event participants by Carlo Montero Personal Developer. A CSV injection vulnerability exists in Carlo Montero Event Registration App v1.0, which stems from improper use of the formula elements of the First Name, Contact, and Remar...

Automotive Shop Management System SQL注入漏洞

Automotive Shop Management System is an automotive shop management system by the individual developer Carlo Montero. Automotive Shop Management System v1.0 suffers from a SQL injection vulnerability that originates in the /asms/classes/Master.php?f=deleteservice component that lacks validation of...

CVE-2022-43142

A cross-site scripting XSS vulnerability in the add-fee.php component of Password Storage Application v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter...

PT-2022-27213 · Unknown · Automotive Shop Management System

Name of the Vulnerable Software and Affected Versions: Automotive Shop Management System version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the /asms/classes/Master.php?f=delete transaction endpoint. This allows for potential unauthorized access and...

PT-2022-26771 · Unknown · Kkfileview

Name of the Vulnerable Software and Affected Versions: kkFileView version 4.1.0 Description: The issue allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the url parameter. This is achieved through a Server-Side Request Forgery SSRF in the...

PT-2022-10780 · Unknown · Simple Image Gallery System

Name of the Vulnerable Software and Affected Versions: Simple Image Gallery System version 1.0 Description: A SQL injection issue exists in the application, specifically through the id parameter on the album page. Recommendations: For Simple Image Gallery System version 1.0, avoid using the id...

PT-2022-26733 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/odlms//classes/Master.php?f=delete activity" API endpoin...

Canteen Management System SQL注入漏洞

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. A security vulnerability exists in Canteen Management System v1.0, which was discovered to contain a SQL injection vulnerability via the id parameter on /youthappam/editcategory.php...

Canteen Management System 跨站脚本漏洞

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. A security vulnerability exists in Canteen Management System v1.0 that originated from a vulnerability that allows attackers to execute arbitrary web script or HTML via a crafted payload...

PT-2022-26697 · Unknown · Food Ordering Management System

Name of the Vulnerable Software and Affected Versions: Food Ordering Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the component /foms/all-orders.php?status=Cancelled%20by%20Customer. This vulnerability allows for potenti...

CVE-2022-44051

The d8s-stats for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-math package. The affected version of d8s-htm is 0.1.0...

PT-2022-26728 · Unknown · Food Ordering Management System

Name of the Vulnerable Software and Affected Versions: Food Ordering Management System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability found in the /foms/place-order.php component. This type of vulnerability allows attackers to inject malicious scripts in...

PT-2022-27091 · Pypi · D8S-Networking +2

Name of the Vulnerable Software and Affected Versions: d8s-networking version 0.1.0 d8s-htm version 0.1.0 Description: The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by thi...

Libde265 缓冲区错误漏洞

Libde265 is a German h.265 video codec. A security vulnerability exists in Libde265 version v1.0.8, which originates from ffhevcputhevcqpelh2v1sse in sse-motion.cc contains a stack buffer overflow, which can be exploited by an attacker to cause a denial of service DoS via a crafted video file...

Online Diagnostic Lab Management System SQL注入漏洞

Online Diagnostic Lab Management System is an online diagnostic lab management system that provides a variety of diagnostic tasks online. online Diagnostic Lab Management System is vulnerable to SQL injection in version v1.0. The vulnerability stems from the affected version not properly filterin...

CVE-2022-43085

An arbitrary file upload vulnerability in addproduct.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

Fast Food Ordering System SQL注入漏洞

Fast Food Ordering System is a fast food ordering system by Carlo Montero, an individual developer. A security vulnerability exists in Fast Food Ordering System v1.0, which originates from the component /fastfood/purrchase.php containing a SQL injection vulnerability...

Fast Food Ordering System 跨站脚本漏洞

Fast Food Ordering System is a fast food ordering system by the individual developer Carlo Montero. A security vulnerability exists in Fast Food Ordering System v1.0, which originates from a cross-site scripting XSS vulnerability contained in /fastfood/purrchase. An attacker could use this...

Canteen Management System SQL注入漏洞

Canteen Management System is a cafeteria management system by Mayuri K. Individual developer. Canteen Management System v1.0 suffers from a SQL injection vulnerability, which stems from an id parameter on /print.php found to contain a SQL injection vulnerability...