CVE-2023-46026

Cross Site Scripting XSS vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary code via the 'adminname' and 'email' parameters...

XWiki Platform 跨站脚本漏洞

XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from the XWiki Foundation in France. XWiki Platform suffers from a cross-site scripting vulnerability that originates from the fact that any registered user can cause stored cross-site scripting XSS by setting...

CVE-2025-34073

creationtimestamp| type| source ---|---|--- 2023-08-16 22:01:49+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/maltrailrce.rb 2025-07-04 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lt65boaqfs2s 2025-08-15...

Sql injection

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function...

K23454411: DNS profile vulnerability CVE-2022-26372

Security Advisory Description When a DNS listener is configured on a virtual server with DNS queueing default, undisclosed requests can cause an increase in memory resource utilization. CVE-2022-26372 Impact System performance can degrade until the Traffic Management Microkernel TMM process is...

CVE-2023-22422 HTTP profile vulnerability

On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, when a HTTP profile with the non-default Enforcement options of Enforce HTTP Compliance and Unknown Methods: Reject are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to...

KLiK SocialMediaWebsite SQL注入漏洞

KLiK SocialMediaWebsite is a simple PHP based social media website by Muhammad Saad personal developer. KLiK SocialMediaWebsite v1.0.1 suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in "profile.php". The vulnerability can be...

SourceCodester Multi Restaurant Table Reservation System 跨站脚本漏洞

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. version 1.0 of SourceCodester Multi Restaurant Table Reservation System is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site...

CVE-2022-31266

In ILIAS through 7.10, lack of verification when changing an email address on the Profile Page allows remote attackers to take over accounts...

Windows User Profile Service Elevation of Privilege Vulnerability

...

CVE-2020-22173

PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\edit-profile.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information...

The vulnerability of the Profile component in the Oracle iSupport web application allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Profile component in the Oracle iSupport web application is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or unauthorizedly access protected information using the HTTP...

F5 Networks BIG-IP : BIG-IP DoS profile vulnerability (K88474783)

Under certain configurations, the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL profile is applied. CVE-2020-5879 Impact The affected system sends some requests to the back-end server without encryption, possibly leaking sensitive data. Therequests...

Unspecified Vulnerability in Oracle iSupport (CNVD-2020-27007)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iSupport is one of the Internet-based customer support...

Unspecified Vulnerability in Oracle iSupport

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iSupport is one of the Internet-based customer support...

F5 Networks BIG-IP : BIG-IP FTP profile vulnerability (K15759349)

FTP traffic passing through a virtual server with both an active FTP profile associated and connection mirroring configured may cause the Traffic Management Microkernel TMM to stop responding, causing the configured high availability HA action to be taken. CVE-2019-6645 Impact This vulnerability...

PHP Scripts Mall Entrepreneur Job Portal Script Cross-Site Request Forgery Vulnerability

PHP Scripts Mall Entrepreneur Job Portal Script is a PHP script that allows you to create your own job portal. PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 suffers from a cross-site request forgery vulnerability that can be exploited via the Edit Profile feature...

MyBB Like 3.0.0 Cross Site Scripting

Exploit Title: MyBB Like Plugin 3.0.0 - Cross-Site Scripting Date: 2018-08-01 Author: 0xB9 Twitter: @0xB9Sec Software Link: https://community.mybb.com/mods.php?action=view&pid=360 Version: 3.0.0 Tested on: Ubuntu 18.04 CVE: N/A 1. Description: This plugin allows users to thank/like other users...

CVE-2018-9123

In Crea8social 2018.2, there is Stored Cross-Site Scripting via a User Profile...

F5 BIG-IP Denial of Service Vulnerability (CNVD-2018-04642)

F5 BIG-IP is an all-in-one network device from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A security vulnerability exists in the F5 BIG-IP. The vulnerability can be exploited by an attacker to cause degradation of comput...