2783 matches found
CVE-2022-28021
Purchase Order Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via /purchaseorder/admin/?page=user...
CVE-2022-28019
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employeeedit.php...
CVE-2022-28012
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\positiondelete.php...
Simple Real Estate Portal System SQL注入漏洞
Simple Real Estate Portal System is a real estate portal system from Carlo Montero's personal developer. version v1.0 of Simple Real Estate Portal System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...
Attendance and Payroll System SQL注入漏洞
Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminemployee edit.php lacks validation of external input...
Victor CMS 代码问题漏洞
Victor CMS is an open source content management system in Nigeria. v1.0 of Victor CMS is vulnerable to remote code execution, which can be exploited by attackers to cause arbitrary code execution...
Purchase Order Management System 代码问题漏洞
Purchase Order Management System is a purchase order management system by Carlo Montero Personal Developer. Purchase Order Management System v1.0 has a security vulnerability that can be exploited by attackers via /purchaseorder/admin/?page=user...
Attendance and Payroll System SQL注入漏洞
Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system by oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component admincashadvancedelete.php lacks validation for external...
ResearchGate Automatic Question Paper Generator System SQL注入漏洞
ResearchGate Automatic Question Paper Generator System an automated question paper generation system. researchGate Automatic Question Paper Generator System version v1.0 is vulnerable to a SQL injection vulnerability, which stems from The id parameter in the GET request may lead to a time-based S...
CVE-2022-22190
An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated attacker to leverage a crafted URL to generate PDF reports, potentially containing sensitive configuration information. A feature was introduced in version 3.1 of the...
Messaging Web Application 跨站脚本漏洞
Messaging Web Application is a messaging web application in PHP and MySQL database by Carlo Montero Personal Developer. A cross-site scripting vulnerability exists in Messaging Web Application version 1.0, which can be exploited by inserting a valid script into a chat that will be executed in the...
Hotel-Mgmt-System 跨站脚本漏洞
Hotel-Mgmt-System is a hotel management system. A cross-site scripting vulnerability exists in Hotel-Mgmt-System version 1.0, which stems from a lack of data validation filtering of user-supplied and output data in /admin.php. An attacker could exploit this vulnerability to execute JavaScript cod...
tomcat: HTTP request smuggling when used with a reverse proxy
Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ignored the transfer...
Microsoft YARP reverse proxy 安全漏洞
Microsoft YARP is a reverse proxy toolkit from Microsoft. It is used to build fast proxy servers in .NET using the infrastructure of ASP.NET and . A security vulnerability exists in the Microsoft YARP reverse proxy. The following products and versions are affected: YARP 1.0, YARP 1.1RC...
CVE-2022-27131
An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-27125
zbzcms v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the neirong parameter at /php/ajax.php...
zbzcms SQL注入漏洞
zbzcms Station Helper CMS is a content management website of China Station Helper CMS zbzcms Inc. zbzcms version 1.0 has a SQL injection vulnerability, which originates from a SQL injection vulnerability found through the id parameter of /php/ajax.php. No detailed vulnerability details are...
School Club Application System跨站脚本漏洞
School Club Application System is a school club application system by Carlo Montero Personal Developer. A security vulnerability exists in School Club Application System version 1.0, which stems from a cross-site scripting vulnerability caused by typing "%22%3E%3Cimg%20src=x%20onerror=alert1%3E",...