12845 matches found
Sql injection
Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...
CVE-2021-45334
Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...
Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability (CNVD-2022-02641)
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of effective...
Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of valid...
Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability (CNVD-2022-02805)
Sourcecodester Vehicle Service Management System is an open source PHP project. Sourcecodester Vehicle Service Management System version 1.0 contains a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping in the user list section of the software's login...
Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability (CNVD-2022-02640)
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. Sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from the vulnerability stem...
Bludit Cross-Site Scripting Vulnerability (CNVD-2022-02493)
Bludit is an open source lightweight blog content management system CMS. cross-site scripting vulnerability exists in Bludit 3.13.1 and prior versions, which stems from a lack of effective filtering and escaping in the About plugin of the software's login panel, leading to a stored cross-site...
GHSA-2H63-QP69-FWVW Server-side request forgery (SSRF) in Apache Batik
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests...
CVE-2021-46071
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel...
CVE-2021-46072
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel...
CVE-2021-46069
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel...
CVE-2021-46069
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel...
CVE-2021-46072
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel...
CVE-2021-46074
A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel...
CVE-2021-45744
A Stored Cross Site Scripting XSS vulnerability exists in bludit 3.13.1 via the TAGS section in login panel...
CVE-2021-46074
A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel...
CVE-2021-46073
A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in login panel...
CVE-2021-45745
A Stored Cross Site Scripting XSS vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel...