MAL-2025-48559 Malicious code in demo-pet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 34bb3b7bb7de794000f698b853d7a96df3975ee9aab48496ad1835aeb753c46f The OpenSSF Package Analysis project identified 'demo-pet-store' @ 2.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in demo-pet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 34bb3b7bb7de794000f698b853d7a96df3975ee9aab48496ad1835aeb753c46f The OpenSSF Package Analysis project identified 'demo-pet-store' @ 2.0.1 npm as malicious. It is considered malicious because: - The package...

CVE-2025-62359

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, a Reflected Cross-Site Scripting XSS vulnerability was identified in the /pet/profilepet.php?idpet= endpoint of the WeGIA application. This vulnerability allows attackers to inject...

CVE-2025-62359

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, a Reflected Cross-Site Scripting XSS vulnerability was identified in the /pet/profilepet.php?idpet= endpoint of the WeGIA application. This vulnerability allows attackers to inject...

EUVD-2025-34095

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, a Reflected Cross-Site Scripting XSS vulnerability was identified in the /pet/profilepet.php?idpet= endpoint of the WeGIA application. This vulnerability allows attackers to inject...

CVE-2025-62359 WeGIA Cross-Site Scripting (XSS) Reflected endpoint id_pet

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, a Reflected Cross-Site Scripting XSS vulnerability was identified in the /pet/profilepet.php?idpet= endpoint of the WeGIA application. This vulnerability allows attackers to inject...

CVE-2025-62359

WeGIA, an open source Web Manager, contains a reflected XSS in the /pet/profile_pet.php?id_pet= endpoint prior to version 3.5.0. The root cause is insufficient input validation/escaping of the id_pet parameter, enabling injection of malicious scripts. The vulnerability affects WeGIA up to 3.4.x a...

CVE-2025-62359 WeGIA Cross-Site Scripting (XSS) Reflected endpoint id_pet

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, a Reflected Cross-Site Scripting XSS vulnerability was identified in the /pet/profilepet.php?idpet= endpoint of the WeGIA application. This vulnerability allows attackers to inject...

CVE-2025-62359 WeGIA Cross-Site Scripting (XSS) Reflected endpoint id_pet

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, a Reflected Cross-Site Scripting XSS vulnerability was identified in the /pet/profilepet.php?idpet= endpoint of the WeGIA application. This vulnerability allows attackers to inject...

PT-2025-41820

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.5.0 Description WeGIA is a web management application designed for institutions, primarily targeting Portuguese language users. A Reflected Cross-Site Scripting XSS issue exists in the application. Attackers can injec...

CVE-2025-62359: Improper Neutralization of Input During Web Page Generation

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, a Reflected Cross-Site Scripting XSS vulnerability was identified in the /pet/profilepet.php?idpet= endpoint of the WeGIA application. This vulnerability allows attackers to inject...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A cross-site scripting vulnerability exists in WeGIA versions prior to 3.5.0 that stems from insufficient cleaning and escaping of the idpet parameter, which could lead to a reflective cross-site scriptin...

CVE-2025-60316

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/viewcustomer.php via the ID parameter...

EUVD-2025-33582

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/viewcustomer.php via the ID parameter...

CVE-2025-60316

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/viewcustomer.php via the ID parameter...

CVE-2025-60316

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/viewcustomer.php via the ID parameter...

CVE-2025-60318

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting XSS in /admin/profile.php via the fname First Name and lname Last Name fields...

SourceCodester Pet Grooming Management Software 安全漏洞

SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. A security vulnerability exists in SourceCodester Pet Grooming Management Software version 1.0, which originates from improper handling of the parameter ID in the...

CVE-2025-60316

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/viewcustomer.php via the ID parameter...

CVE-2025-60316

SourceCodester Pet Grooming Management Software version 1.0 is vulnerable to SQL Injection within the admin/view_customer.php file. The root cause is the improper handling and lack of sanitization of the ID parameter, which allows an attacker to execute unauthorized SQL commands. This vulnerabili...