CVE-2025-15171 SohuTV CacheCloud ServerController.java index cross site scripting

A vulnerability was identified in SohuTV CacheCloud up to 3.2.0. This affects the function index of the file src/main/java/com/sohu/cache/web/controller/ServerController.java. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly...

CVE-2025-15171 SohuTV CacheCloud ServerController.java index cross site scripting

A vulnerability was identified in SohuTV CacheCloud up to 3.2.0. This affects the function index of the file src/main/java/com/sohu/cache/web/controller/ServerController.java. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly...

EUVD-2025-205546

A security vulnerability has been detected in Advaya Softech GEMS ERP Portal up to 2.1. This affects an unknown part of the file /home.jsp?isError=true of the component Error Message Handler. The manipulation of the argument Message leads to cross site scripting. It is possible to initiate the...

CVE-2025-15168

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

CVE-2025-15167

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /detailtransac.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and ma...

EUVD-2025-205547

A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made available ...

EUVD-2025-205543

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

EUVD-2025-205545

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /detailtransac.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and ma...

CVE-2025-15167 itsourcecode Online Cake Ordering System detailtransac.php sql injection

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /detailtransac.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and ma...

CVE-2025-15167 itsourcecode Online Cake Ordering System detailtransac.php sql injection

A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /detailtransac.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and ma...

CVE-2025-15165

A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. The impacted element is an unknown function of the file /updatecustomer.php?action=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

EUVD-2025-205534

A vulnerability was found in Tenda WH450 1.0.0.18. Affected is an unknown function of the file /goform/PPTPUserSetting. Performing manipulation of the argument delno results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made public and could b...

CVE-2025-15162

A vulnerability was determined in Tenda WH450 1.0.0.18. Affected by this vulnerability is an unknown functionality of the file /goform/RouteStatic. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been...

PT-2025-53773

Name of the Vulnerable Software and Affected Versions code-projects College Notes Uploading System version 1.0 Description A security issue exists in code-projects College Notes Uploading System 1.0. The manipulation of the image argument in an unknown function within the /dashboard/userprofile.p...

PT-2025-53803

Name of the Vulnerable Software and Affected Versions Refugee Food Management System version 1.0 Description A security flaw exists in Refugee Food Management System version 1.0. The issue involves SQL injection stemming from the manipulation of the rfid argument within the file...

The vulnerability of the web interface of the Nagios Log Server monitoring and analysis software allows a hacker to perform cross-site scripting attacks.

The vulnerability of the web interface of the Nagios Log Server monitoring and analysis software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Instant Search function in the Content Search module of the ManageEngine Exchange Reporter Plus software, a monitoring, analysis, and reporting tool, allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Instant Search function in the Content Search module of the ManageEngine Exchange Reporter Plus software exists because measures to protect the website structure have not been taken. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

PT-2025-53801

Name of the Vulnerable Software and Affected Versions Campcodes Supplier Management System version 1.0 Description A flaw exists in Campcodes Supplier Management System that allows for SQL injection. The issue is located in the file '/admin/add area.php' and involves manipulation of the txtAreaCo...

PT-2025-53718

Name of the Vulnerable Software and Affected Versions D-Link DWR-M920 versions up to 1.1.50 Description A flaw exists in D-Link DWR-M920 devices running versions up to 1.1.50. This issue involves the manipulation of the fota url argument within the sub 4155B4 function located in the file...

PT-2025-53708

Name of the Vulnerable Software and Affected Versions code-projects Refugee Food Management System version 1.0 Description A security flaw exists in code-projects Refugee Food Management System 1.0. The issue is a SQL injection impacting an unknown function within the /home/pagenateRefugeesList.p...