12856 matches found
CVE-2021-33470
COVID19 Testing Management System 1.0 is vulnerable to SQL Injection via the admin panel...
CVE-2021-33470
COVID19 Testing Management System 1.0 is vulnerable to SQL Injection via the admin panel...
CVE-2021-33470
COVID19 Testing Management System 1.0 is vulnerable to SQL Injection via the admin panel...
Sql injection
COVID19 Testing Management System 1.0 is vulnerable to SQL Injection via the admin panel...
CVE-2021-33470
CVE-2021-33470 affects COVID19 Testing Management System 1.0. The vulnerability is SQL Injection via the admin panel, caused by unsafe SQL handling in the application. Impact per sources includes high/critical severity (CVSS: 3.1 base score 9.8) with potential data disclosure/modification and ful...
CVE-2021-33470
COVID19 Testing Management System 1.0 is vulnerable to SQL Injection via the admin panel...
PT-2021-20142 · Unknown · Covid19 Testing Management System
Name of the Vulnerable Software and Affected Versions: COVID19 Testing Management System version 1.0 Description: The issue is related to SQL Injection via the admin panel. This allows for potential unauthorized access and manipulation of data. Recommendations: For COVID19 Testing Management Syst...
COVID19 Testing Management System SQL注入漏洞
COVID19 Testing Management System is a COVID19 Testing Management System. A SQL injection vulnerability exists in COVID19 Testing Management System version 1.0, which is exploited via the admin panel...
Visitors <= 0.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
The plugin is affected by an Unauthenticated Stored Cross-Site Scripting XSS vulnerability. The plugin would display the user's user agent string without validation or encoding within the WordPress admin panel. $ curl -i http://localhost:10008/ --user-agent "alert1" The payload will be executed o...
Apple macOS 权限许可和访问控制问题漏洞
Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. Apple macOS is vulnerable to a privilege-granting and access-control issue, which arises from security restrictions not properly applied by NSOpenPanel. An attacker could exploit the vulnerability to escalate...
CentOS Web Panel Command Injection Vulnerability
CentOS Web Panel CWP is a free web hosting control panel from the Control Web Panel community. A security vulnerability exists in CentOS Web Panel that originates in the Unprivileged User Portal section that is affected by a command injection vulnerability that can be exploited by an attacker to...
CVE-2020-21345
Cross Site Scripting XSS vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a remote malicious user execute arbitrary code...
Cross site scripting
Cross Site Scripting XSS vulnerability in Halo 1.1.3 via post publish components in the manage panel, which lets a remote malicious user execute arbitrary code...
CVE-2020-21345
Halo 1.1.3 contains a Cross Site Scripting (XSS) vulnerability in the post publish components of the manage panel, allowing a remote attacker to execute arbitrary code. The available documents confirm the affected product/version and the XSS impact but do not provide detailed root-cause analysis,...
Cross-site Scripting (XSS) - Stored in stevearc/pypicloud
✍️ Description i didn't know there was something like this 🕵️♂️ Proof of Concept details https://github.com/stevearc/pypicloud/issues/280 💥 Impact stored xss on admin panel many users still have older versions...
COVID19 Testing Management System 1.0 - SQL Injection (Auth Bypass) Vulnerability
Exploit Title: COVID19 Testing Management System 1.0 - SQL Injection Auth Bypass Exploit Author: Rohit Burke Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/covid19-testing-management-system-using-php-and-mysql/ Version: 1.0 Tested on: Windows 10 SQL Injection:...
COVID19 Testing Management System 1.0 - SQL Injection (Auth Bypass)
Exploit Title: COVID19 Testing Management System 1.0 - SQL Injection Auth Bypass Date: 19/05/2021 Exploit Author: Rohit Burke Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/covid19-testing-management-system-using-php-and-mysql/ Version: 1.0 Tested on: Windows 10 SQL...
COVID19 Testing Management System 1.0 SQL Injection
Exploit Title: COVID19 Testing Management System 1.0 - SQL Injection Auth Bypass Date: 19/05/2021 Exploit Author: Rohit Burke Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/covid19-testing-management-system-using-php-and-mysql/ Version: 1.0 Tested on: Windows 10 SQL...