CVE-2024-51224

The Phpgurukul Vehicle Record Management System v1.0 contains multiple cross-site scripting (XSS) vulnerabilities in the /admin/edit-vehicle.php component. The root cause is the lack of effective filtering and escaping of data provided by the application. Attackers can exploit this by injecting c...

CVE-2023-53931 Revive Adserver 5.4.1 Cross-Site Scripting via Banner Advanced Settings

Revive Adserver 5.4.1 contains a cross-site scripting vulnerability in the banner advanced configuration page that allows attackers to inject malicious scripts. Attackers can craft a malicious link to the banner-advanced.php endpoint with XSS payloads in prepend and append parameters to execute...

The vulnerability of the EvaProject (Carbon ERP) enterprise management system, related to the failure to protect the structure of the web page, allows a perpetrator to gain unauthorized access to the API token.

The vulnerability of the EvaProject Carbon ERP enterprise management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the API token by introducing a...