PT-2024-15785 · Foru Cms · Foru Cms

Name of the Vulnerable Software and Affected Versions: ForU CMS versions up to 2020-06-23 Description: A problematic issue was found in ForU CMS, affecting an unknown functionality of the file channel.php. The manipulation of the c cmodel argument leads to file inclusion. This issue can be...

PT-2024-19481 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is related to Cross Site Scripting XSS in the email settings of the website settings section. This allows for potential malicious script injection. Recommendations: For FlyCms version 1.0, as a...

PT-2024-19408 · Unknown · Group-Office

Name of the Vulnerable Software and Affected Versions: Group-Office versions prior to 6.8.29 Description: The issue is related to the file upload mechanism in Group-Office, allowing an attacker to execute arbitrary JavaScript code by embedding it within a file's name. For example, using a filenam...

PT-2024-19501 · Flycms · Flycms

Name of the Vulnerable Software and Affected Versions: FlyCms version 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. It occurs via the "/system/links/add link" API endpoint. This allows for potentially malicious requests to be made without the user's knowledge or...

PT-2024-12764 · Ibm · Ibm Openpages With Watson

Name of the Vulnerable Software and Affected Versions: IBM OpenPages with Watson versions 8.3 through 9.0 Description: The issue provides weaker than expected security in an OpenPages environment using Native authentication. An attacker with access to the OpenPages database could exploit this...

PT-2024-15719 · Phpgurukul · Phpgurukul Company Visitor Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Company Visitor Management System version 1.0 Description: A vulnerability was found in the PHPGurukul Company Visitor Management System, affecting some unknown functionality of the file search-visitor.php. The manipulation leads t...

PT-2024-19535 · Unknown · Stupid Simple Cms

Name of the Vulnerable Software and Affected Versions: Stupid Simple CMS versions =1.2.4 Description: A Cross-Site Request Forgery CSRF issue was discovered in the /admin-edit.php component. This allows for potential unauthorized actions on the affected system. Recommendations: For versions =1.2....

PT-2024-19506 · Unknown · Complete Supplier Management System

Name of the Vulnerable Software and Affected Versions: Complete Supplier Management System version 1.0 Description: The issue is related to SQL Injection via the "/Supply Management System/admin/edit distributor.php?id=" endpoint. This allows for potential exploitation. No information is provided...

PT-2024-1337 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.35 and prior MySQL Server versions 8.2.0 and prior Description: The issue is related to insufficient input validation in the Server: RAPID component of Oracle MySQL Server. It allows a low-privileged attacker with...

PT-2024-12550 · Bagisto · Bagisto

Name of the Vulnerable Software and Affected Versions: Bagisto versions 1.5.0 and earlier Bagisto versions 1.3.1 and earlier Description: A Cross Site Scripting issue allows an attacker to execute arbitrary code via a crafted SVG file upload. Recommendations: For Bagisto versions 1.5.0 and earlie...

PT-2024-15400 · WordPress · Eventon

Name of the Vulnerable Software and Affected Versions: EventON WordPress plugin versions prior to 4.5.5 EventON WordPress plugin versions prior to 2.2.7 Description: The issue arises from the plugin's failure to properly sanitise and escape a parameter before outputting it back in pages. This lea...

PT-2024-13959 · Traccar · Traccar

Name of the Vulnerable Software and Affected Versions: Traccar versions prior to 5.11 Description: Traccar, an open source GPS tracking system, is affected by an unrestricted file upload vulnerability in the File feature. This allows attackers to execute arbitrary code on the server. The issue is...

PT-2024-15644 · Unknown · Codeastro Real Estate Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Real Estate Management System versions up to 1.0 Description: A critical vulnerability has been found in the CodeAstro Real Estate Management System. This issue affects an unknown part of the file propertydetail.php. The manipulatio...

PT-2024-14358 · Unknown · Phpgurukul Art Gallery Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.1 Description: The issue affects the "Update Artist Image" functionality, where the imageid parameter is vulnerable to SQL Injection. This allows an attacker to inject malicious SQL code,...

PT-2024-15591 · Code Projects · Dormitory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Dormitory Management System version 1.0 Description: A critical vulnerability was found in the Dormitory Management System. The issue affects an unknown functionality of the file login.php. The manipulation of the username...

PT-2024-15582 · Code Projects · Code-Projects Employee Profile Management System

Name of the Vulnerable Software and Affected Versions: code-projects Employee Profile Management System version 1.0 Description: A problematic vulnerability was found in the code-projects Employee Profile Management System. This issue affects the file download.php, where the manipulation of the...

PT-2024-14008 · Gl.Inet · Gl.Inet

Name of the Vulnerable Software and Affected Versions: GL.iNet devices versions prior to 4.5.0 Description: An issue was discovered where GL.iNet devices assign the same session ID after each user reboot, allowing attackers to share session identifiers between different sessions and bypass...

PT-2024-15589 · Unknown · Code-Projects Dormitory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Dormitory Management System version 1.0 Description: A vulnerability was found in the code-projects Dormitory Management System, affecting some unknown processing of the file modifyuser.php. The manipulation of the argument mnam...

PT-2024-19623 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: A command injection issue was discovered via the hostName parameter in the setWanCfg function. This allows for potential exploitation. Recommendations: For TOTOLINK A3300R version...

PT-2024-15132 · WordPress · Oxygen Builder

Name of the Vulnerable Software and Affected Versions: Oxygen Builder plugin for WordPress versions up to, and including, 4.8 Description: The issue is related to Stored Cross-Site Scripting via a custom field due to insufficient input sanitization and output escaping. This allows authenticated...