Lucene search
K

206 matches found

OSV
OSV
added 2023/07/20 8:15 p.m.1 views

CVE-2023-3793

A vulnerability was found in Weaver e-cology. It has been rated as critical. This issue affects some unknown processing of the file filelFileDownloadForOutDoc.class of the component HTTP POST Request Handler. The manipulation of the argument fileid with the input 1+WAITFOR+DELAY leads to sql...

9.8CVSS5.7AI score0.00056EPSS
Exploits0References2
Prion
Prion
added 2023/07/15 9:15 a.m.19 views

Sql injection

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=saveitem of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. It is...

6.5CVSS9.7AI score0.00047EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/12 12:0 a.m.3 views

PT-2023-25571 · Gz Scripts · Gz Scripts Vacation Rental Website

Name of the Vulnerable Software and Affected Versions: GZ Scripts Vacation Rental Website version 1.8 Description: A vulnerability was found in the HTTP POST Request Handler component, affecting some unknown functionality of the file /VacationRentalWebsite/property/8/ad-has-principes/. The...

6.1CVSS4.7AI score0.00098EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/05/20 12:0 a.m.1 views

Dental Clinic Appointment Reservation System 跨站脚本漏洞

Dental Clinic Appointment Reservation System is a Dental Clinic Appointment Reservation System by jkev Personal Developer. A cross-site scripting vulnerability exists in SourceCodester Dental Clinic Appointment Reservation System version 1.0 due to an unknown function in the file /admin/service.p...

6.1CVSS4.1AI score0.0025EPSS
Exploits1References4
OSV
OSV
added 2023/05/14 10:15 a.m.1 views

CVE-2023-2694

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been classified as critical. This affects an unknown part of the file /dosen/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to initiate th...

9.8CVSS5.7AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/02/22 12:0 a.m.3 views

PT-2023-16647 · Sourcecodester · Sourcecodester Music Gallery Site

Name of the Vulnerable Software and Affected Versions: SourceCodester Music Gallery Site version 1.0 Description: A critical issue affects the processing of the file Users.php in the POST Request Handler component, leading to improper access controls. The manipulation can be initiated remotely...

9.8CVSS7.5AI score0.03844EPSS
Exploits5References5
F5 Networks
F5 Networks
added 2023/02/21 6:51 p.m.27 views

K15793: PHP Posthandler vulnerability CVE-2014-3622

Security Advisory Description A security vulnerability in the PHP scripting language may allow remote code execution by way of the Post Handler. CVE-2014-3622 - pending Impact None. F5 products do not use vulnerable versions of PHP. Security Advisory Status F5 Product Development has assigned ID...

9.8CVSS9.4AI score0.01951EPSS
Exploits1
NVD
NVD
added 2022/12/18 11:15 a.m.8 views

CVE-2022-4596

A vulnerability, which was classified as problematic, has been found in Shoplazza 1.1. This issue affects some unknown processing of the file /admin/api/admin/articles/ of the component Add Blog Post Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be...

5.4CVSS0.0027EPSS
Exploits1References3
OSV
OSV
added 2022/12/18 11:15 a.m.2 views

CVE-2022-4596

A vulnerability, which was classified as problematic, has been found in Shoplazza 1.1. This issue affects some unknown processing of the file /admin/api/admin/articles/ of the component Add Blog Post Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be...

5.4CVSS3.9AI score
Exploits0References3
Prion
Prion
added 2022/12/18 11:15 a.m.16 views

Cross site scripting

A vulnerability, which was classified as problematic, has been found in Shoplazza 1.1. This issue affects some unknown processing of the file /admin/api/admin/articles/ of the component Add Blog Post Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be...

4.9CVSS5.3AI score0.0027EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/12/18 12:0 a.m.2 views

PT-2022-27700 · Shoplazza · Shoplazza

Name of the Vulnerable Software and Affected Versions: Shoplazza version 1.1 Description: A problematic issue has been found in the processing of the file "/admin/api/admin/articles/" of the component Add Blog Post Handler. The manipulation of the Title argument leads to cross-site scripting. The...

5.4CVSS5.1AI score0.0027EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2022/12/18 12:0 a.m.4 views

CVE-2022-4596 Shoplazza Add Blog Post cross site scripting

A vulnerability, which was classified as problematic, has been found in Shoplazza 1.1. This issue affects some unknown processing of the file /admin/api/admin/articles/ of the component Add Blog Post Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be...

3.5CVSS4.1AI score0.0027EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/12/08 12:0 a.m.1 views

PT-2022-35954 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue is related to kprobes and ftrace. It involves skipping the clearing of aggrprobe's post handler in the kprobe-on-ftrace case. The actual impact and attack plausibility have not yet...

7.1AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/12/03 12:0 a.m.2 views

PT-2022-26540 · Unknown · House Rental System

Name of the Vulnerable Software and Affected Versions: House Rental System affected versions not specified Description: A critical vulnerability has been found in the House Rental System, affecting an unknown functionality of the file search-property.php of the component POST Request Handler. The...

9.8CVSS9.5AI score0.00213EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2022/11/01 12:0 a.m.2 views

PT-2022-24133 · Unknown · Flipbook Plugin

Name of the Vulnerable Software and Affected Versions: Flipbook Plugin affected versions not specified Description: A vulnerability was found in the Flipbook Plugin, affecting some unknown functionality of the file post.php of the component Edit Post Handler. The manipulation of the Shortcode...

6AI score
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/06/21 12:0 a.m.13 views

Cross site scripting in Elefant CMS

A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting Persistent. It is possible to initiate the attack remotely. Upgrading to version 1.3.13 i...

5.4CVSS5.4AI score0.00206EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2022/06/21 12:0 a.m.10 views

GHSA-4453-G295-24MH Cross site scripting in Elefant CMS

A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting Persistent. It is possible to initiate the attack remotely. Upgrading to version 1.3.13 i...

5.4CVSS4.4AI score0.00206EPSS
Exploits0References4
OSV
OSV
added 2022/06/20 5:15 a.m.2 views

CVE-2017-20060

A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting Persistent. It is possible to initiate the attack remotely. Upgrading to version 1.3.13 i...

5.4CVSS4.6AI score
Exploits0References2
Prion
Prion
added 2022/06/20 5:15 a.m.8 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting Persistent. It is possible to initiate the attack remotely. Upgrading to version 1.3.13 i...

3.5CVSS5.2AI score0.00206EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/06/20 4:50 a.m.14 views

CVE-2017-20060 Elefant CMS Blog Post Persistent cross site scriting

A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting Persistent. It is possible to initiate the attack remotely. Upgrading to version 1.3.13 i...

3.5CVSS5.3AI score0.00206EPSS
Exploits0References2
Rows per page
Query Builder