Code-Projects Responsive Blog Site 注入漏洞

Code-Projects Responsive Blog Site is a responsive blog site from Code-Projects open source. An injection vulnerability exists in Code-Projects Responsive Blog Site version 1.0, which stems from an incorrect manipulation of the parameter ID in the file /single.php resulting in SQL injection...

Belkin F9K1122 安全漏洞

The Belkin F9K1122 is a WiFi signal extender from Belkin Canada. The Belkin F9K1122 suffers from a stack buffer overflow vulnerability that results from the incorrect manipulation of multiple parameters in the file /goform/formWlanMP, no details of the vulnerability are provided at this time...

Comodo Internet Security Premium 路径遍历漏洞

Comodo Internet Security Premium is a suite of computer security software from Comodo, Inc. that focuses on Internet security. A path traversal vulnerability exists in Comodo Internet Security Premium version 12.3.4.8162, which stems from a path traversal vulnerability due to incorrect manipulati...

Tenda AC18 /goform/SetIPTVCfg Command Injection Vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a command injection vulnerability that stems from incorrect manipulation of the parameter list in the file /goform/SetIPTVCfg. No details of the vulnerability are available at this time...

Mars: Order More Than Maximum Allowed Quantity

The business logic vulnerability allowed users to bypass the product quantity limits 1-20 items through parameter manipulation. While the user interface enforced these limits, the necessary server-side validation was missing...

Security update for opensaml

This update for opensaml fixes the following issues: CVE-2025-31335: Fixed a bug where parameter manipulation allows the forging of signed SAML messages. bsc1239889 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2025:01500-1 Security update for opensaml

This update for opensaml fixes the following issues: - CVE-2025-31335: Fixed a bug where parameter manipulation allows the forging of signed SAML messages. bsc1239889...

CVE-2025-4568

Improper neutralization of input provided by an unauthorized user into changesreferenceid parameter in URL allows for boolean-based Blind SQL Injection attacks...

SourceCodester Food Menu Manager 安全漏洞

SourceCodester Food Menu Manager is a SourceCodester open source food menu manager. A security vulnerability exists in SourceCodester Food Menu Manager version 1.0, which stems from improper manipulation of the parameters name and description by the component Add Menu Handler, which could lead to...

CVE-2025-5584 PHPGurukul Hospital Management System POST Parameter edit-patient.php cross site scripting

A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been classified as problematic. Affected is an unknown function of the file /doctor/edit-patient.php?editid=2 of the component POST Parameter Handler. The manipulation of the argument patname leads to cross site...

Baison Channel Middleware Product 安全漏洞

Baison Channel Middleware Product is a software for multi-channel business integration for retail enterprises from Baison China. A security vulnerability exists in Baison Channel Middleware Product version 2.0.1, which originates from an incorrect manipulation of the parameter data resulting in S...

CVE-2025-5404 chaitak-gorai Blogbook GET Parameter search.php denial of service

A vulnerability classified as problematic was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This vulnerability affects unknown code of the file /search.php of the component GET Parameter Handler. The manipulation of the argument Search leads to denial of service...

PHPGurukul Student Record System 注入漏洞

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID in the file /login.php. An attacker can exploit this vulnerability to execute...

Insecure Direct Object Reference (IDOR)

in2code/femanager is vulnerable to Insecure Direct Object Reference IDOR. The vulnerability is due to improper access control on the user parameter in the newAction method of the newController, allows attackers to manipulate the parameter to access data of other frontend users...

WCMS 授权问题漏洞

WCMS is a content management system CMS from the individual developers at Vedegis. An authorization issue vulnerability exists in WCMS version 8.3.11 and earlier, which stems from improper authentication due to incorrect manipulation of the parameter uid in file/index.php?articleadmin/getallcon...

CVE-2024-5731

A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by manipulating the parameter, thereby leveraging sensitive information...

CVE-2024-57549

CMSimple 5.16 allows the user to read cms source code through manipulation of the file name in the file parameter of a GET request...

CVE-2024-47087

This vulnerability exists in Apex Softcell LD Geo due to improper validation of the certain parameters Client ID, DPID or BOID in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive...

CVE-2023-1440

A vulnerability, which was classified as critical, was found in SourceCodester Automatic Question Paper Generator System 1.0. Affected is an unknown function of the file users/user/manageuser.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. I...

CVE-2023-33706

SysAid before 23.2.15 allows Indirect Object Reference IDOR attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIframe.jsp or a modified srID parameter to ShowMessage.jsp...