16576 matches found
Online Diagnostic Lab Management System SQL Injection Vulnerability
Online Diagnostic Lab Management System is an online diagnostic lab management system that provides a variety of diagnostic tasks online. online Diagnostic Lab Management System is vulnerable to SQL injection in version v1.0. The vulnerability stems from the affected version not properly filterin...
CVE-2022-44624
In JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build log if they contained special characters...
CVE-2022-42744
CandidATS version 3.0.0 allows an external attacker to perform CRUD operations on the application databases. This is possible because the application does not correctly validate the entriesPerPage parameter against SQLi attacks...
CVE-2022-44624
CVE-2022-44624 affects JetBrains TeamCity versions prior to 2022.10, where password parameters containing special characters could be exposed in build logs. The issue stems from password parameter handling in the affected build process. Impact is information disclosure in logs; no exploitation de...
CVE-2022-44624
In JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build log if they contained special characters...
Reflected XSS on multiple locations and parameters
Description The user input is not being sanitized properly on multiple locations and on different parameters leading to XSS. Proof of Concept https://demo.bumsys.org/reports/sales-report/?salesDate=" Payload "...
Schoolbox SQL注入漏洞
Schoolbox is an online learning platform from Schoolbox Australia. A security vulnerability exists in Schoolbox version 21.0.2 that stems from multiple SQL injection attacks via vulnerable parameters. An attacker exploiting the vulnerability could extract data from the database...
WordPress theme Newspaper 跨站脚本漏洞
WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on servers running PHP and MySQL.WordPress theme is a theme for WordPress. A cross-site scripting vulnerability exists in versions of WordPress theme Newspaper prior to 12, whi...
Train Scheduler App 1.0 Insecure Direct Object Reference
Exploit Title: Train Scheduler App v1.0 - Insecure Direct Object Reference IDOR to "delete user id " Exploit Author: Rohit Sharma Vendor Name: oretnom23 Vendor Homepage: https://www.sourcecodester.com/php/15720/train-scheduler-app-using-php-oop-and-mysql-database-free-download.html Software Link:...
No access control for initialize in diamondinit
Lines of code Vulnerability details Impact Detailed description of the impact of this finding. The initialize function has no access control and thus a malicious user can call it an rest all the the parameters of the system. Proof of Concept Provide direct links to all referenced code in GitHub...
PT-2022-5713 · NetGear · Netgear R7000P
Name of the Vulnerable Software and Affected Versions: Netgear R7000P version 1.3.1.64 Description: The issue is related to buffer overflow errors in the NETGEAR R7000P router's software. Exploitation of this issue may allow a remote attacker to execute arbitrary code through parameters KEY1 and...
PT-2022-5718 · NetGear · Netgear R7000P
Name of the Vulnerable Software and Affected Versions: Netgear R7000P versions V1.3.0.8 through V1.3.1.64 Description: The issue is related to a buffer overflow error via parameters stamode dns1 pri and stamode dns1 sec. This can allow a remote attacker to execute arbitrary code through these...
DOM XSS on lab.flipper.net via the "channel" or "version" parameters
Description Hi ! The Web Platform for the Flipper is vulnerable to DOM XSS via the channel and version parameters. This occurs because when the user clicks on Choose firmware the values are passed directly to innerHTML without parsing. Proof of Concept 1. 1 The user access the following URL :...
Remote Code Execution (RCE)
linkis-entrance is vulnerable to remote code execution. The vulnerability exists in the onProgressUpdate function of QueryPersistenceManager.java, allowing an attacker to inject and execute malicious query parameters when an attacker has write access to the database and configures a JDBC EC with ...
Online Medicine Ordering System 安全漏洞
Online Medicine Ordering System is an online medicine ordering system developed by Carlo Montero. A security vulnerability exists in version 1.0 of the Online Medicine Ordering System due to an unknown function in its /omos/admin/?page=user/list file that operates on the parameters First...
Command injection
D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm...
CVE-2022-39944
In Apache Linkis =1.2.0 when used with the MySQL Connector/J, a deserialization vulnerability with possible remote code execution impact exists when an attacker has write access to a database and configures a JDBC EC with a MySQL data source and malicious parameters. Therefore, the parameters in...
Metabase 安全漏洞
Metabase is an open source data analytics platform from the US-based Metabase, Inc. Metabase suffers from a security vulnerability that stems from the fact that when requesting data for a question in an embedded dashboard, it is possible to circumvent locked parameters by constructing a malicious...
CVE-2022-39944 The Apache Linkis JDBC EngineConn module has a RCE Vulnerability
In Apache Linkis =1.2.0 when used with the MySQL Connector/J, a deserialization vulnerability with possible remote code execution impact exists when an attacker has write access to a database and configures a JDBC EC with a MySQL data source and malicious parameters. Therefore, the parameters in...
CVE-2022-39358 Metabase vulnerable to circumvention of Locked parameter in Signed Embedding
Metabase is data visualization software. Prior to versions 0.44.5, 1.44.5, 0.43.7, 1.43.7, 0.42.6, and 1.42.6, it was possible to circumvent locked parameters when requesting data for a question in an embedded dashboard by constructing a malicious request to the backend. This issue is patched in...