1123 matches found
Best Courier Management System 跨站脚本漏洞
Best Courier Management System is a courier management system. A cross-site scripting vulnerability exists in Best Courier Management System v.1.0, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by a remote attacker to execu...
PT-2023-30731 · Unknown · Gaatitrack Courier Management System
Name of the Vulnerable Software and Affected Versions: GaatiTrack Courier Management System version 1.0 Description: A Cross Site Scripting XSS issue allows a remote attacker to inject JavaScript via the page parameter to "login.php" or "header.php". This could potentially lead to unauthorized...
CVE-2023-6411
A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via home.php in the update parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all...
PT-2023-32600 · Sourcecodester · Sourcecodester Best Courier Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Best Courier Management System version 1.0 Description: A problematic issue was found, allowing for cross site scripting through the manipulation of the page argument with malicious input, such as alert1. This can be exploited...
VulnCheck KEV: CVE-2020-17453
WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter...
CVE-2023-4591
A local file inclusion vulnerability has been found in WPN-XM Serverstack affecting version 0.8.6, which would allow an unauthenticated user to perform a local file inclusion LFI via the /tools/webinterface/index.php?page parameter by sending a GET request. This vulnerability could lead to the...
PT-2023-29763 · Unknown · Wpn-Xm Serverstack
Name of the Vulnerable Software and Affected Versions: WPN-XM Serverstack version 0.8.6 Description: A local file inclusion issue has been found, allowing an unauthenticated user to perform a local file inclusion via the "/tools/webinterface/index.php?page" parameter by sending a GET request. Thi...
PT-2023-30276 · Unknown · Best Courier Management System
Name of the Vulnerable Software and Affected Versions: Best Courier Management System version 1.000 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the page parameter in the URL. This is a Cross Site Scripting vulnerability. Recommendations: For...
CVE-2023-5581
A vulnerability classified as problematic was found in SourceCodester Medicine Tracker System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclos...
PT-2023-6258 · Yifan · Yifan Yf325
Name of the Vulnerable Software and Affected Versions: Yifan YF325 version 1.0 20221108 Description: A buffer overflow vulnerability exists in the httpd next page functionality, allowing an attacker to execute arbitrary commands by sending a specially crafted network request. The buffer overflow ...
PT-2023-30466 · Unknown · Sourcecodester Inventory Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file index.php. The manipulation of the page argument leads to file inclusion. This issue can b...
Inventory Management System Security Vulnerability
Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in SourceCodester Inventory Management System version 1.0, which stems from the parameter page in the file index.php that causes the file to be included...
Tenda AC7 缓冲区错误漏洞
Tenda AC7 is a wireless router from Tenda, China. A security vulnerability exists in the Tenda AC7, which is caused by a buffer overflow in the page parameter of /goform/NatStaticSetting...
CVE-2023-2272
The Tiempo.com WordPress plugin through 0.1.2 does not sanitise and escape the page parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-38938
Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im...
CVE-2023-38938
Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im...
CVE-2023-38932
Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter in the SafeEmailFilter function...
CVE-2023-38938
Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im...