699 matches found
Code injection
Insecure permissions in luowice 3.5.18 allow attackers to view information for other alarm devices via modification of the eseeid parameter...
Luowice 安全漏洞
Luowice is a cloud app for a series of security monitoring devices from China Luowice. A security vulnerability exists in Luowice version 3.5.18. An attacker can use this vulnerability to view the information of other alarm devices by modifying the eseeid parameter...
CVE-2023-2692
A vulnerability has been found in SourceCodester ICT Laboratory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file views/roominfo.php of the component GET Parameter Handler. The manipulation of the argument name leads to cro...
Rocket.Chat 授权问题漏洞
Rocket.Chat is an open source team chat software. A security vulnerability exists in versions prior to Rocket.Chat 6.0 that stems from improper authorization and allows an attacker to manipulate the parameter rid to change certain methods...
Air Cargo Management System 跨站脚本漏洞
Air Cargo Management System is an air cargo management system. A cross-site scripting vulnerability exists in SourceCodester Air Cargo Management System version 1.0, which stems from a problem with the file classes/Master.php?f=savecargotype, where manipulation of the parameter name can lead to...
Video Sharing Website SQL注入漏洞
Video Sharing Website is a video sharing website. A SQL injection vulnerability exists in Campcodes Video Sharing Website version 1.0, which stems from a problem in the file watch.php, where manipulation of the parameter code can lead to sql injection...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.5.0. By manipulating the "orderType" parameter and the ordering of the returned content using an SQL...
The vulnerability of Microsoft Edge browser on Android, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.
The vulnerability of Microsoft Edge browser on Android is related to information representation errors in the user interface. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks by manipulating parameters...
Site Reviews < 6.7.1 - Admin+ Stored XSS
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. 1. Login as Admin. 2. Go to...
Young Entrepreneur E-Negosyo System 代码问题漏洞
Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in version 1.0 of the SourceCodester Young Entrepreneur E-Negosyo System that stems from an incorrect manipulation of the parameter image resulting in...
PT-2023-17172 · Sourcecodester · Sourcecodester Earnings/Expense Tracker App
Name of the Vulnerable Software and Affected Versions: SourceCodester Earnings and Expense Tracker App version 1.0 Description: A problematic vulnerability was found in the SourceCodester Earnings and Expense Tracker App. This issue affects the file Master.php, specifically the a parameter with t...
PT-2023-17012 · Sourcecodester · Sourcecodester Automatic Question Paper Generator System
Name of the Vulnerable Software and Affected Versions: SourceCodester Automatic Question Paper Generator System version 1.0 Description: A critical issue was found in the GET Parameter Handler component of the SourceCodester Automatic Question Paper Generator System. The issue affects the file...
ByWater Solutions bywater-koha-xslt SQL注入漏洞
ByWater Solutions bywater-koha-xslt is ByWater Solutions' Koha repository for XSLT customization for ByWater partners. ByWater Solutions bywater-koha-xslt suffers from a SQL injection vulnerability that stems from manipulation of the parameter name that can lead to sql injection...
Online Reviewer Management System SQL注入漏洞
Online Reviewer Management System is an online reviewer management system. A SQL injection vulnerability exists in SourceCodester Online Reviewer Management System version 1.0, which is caused by incorrect manipulation of the parameter id resulting in sql injection...
SourceCodester Yoga Class Registration System SQL注入漏洞
Yoga Class Registration System is a yoga class registration system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Yoga Class Registration System version 1.0, which stems from an incorrect manipulation of the parameter id resulting in sql injection...
Online Pizza Ordering System SQL注入漏洞
Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in Online Pizza Ordering System version 1.0, which is caused by an incorrect manipulation of a parameter ID that results in an sql injection...
CVE-2023-23460
Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass...
CVE-2023-23460
Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass...
