1375 matches found
CVE-2023-25241
bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...
Cross site scripting
bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...
CVE-2023-25241
bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...
CVE-2023-25241
bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...
CVE-2023-25241
bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...
CVE-2023-25241: Improper Neutralization of Input During Web Page Generation
bgERP v22.31 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...
CVE-2023-25241
CVE-2023-25241 affects bgERP v22.31 and is a reflected cross-site scripting (XSS) vulnerability exploitable via the Search parameter. The issue is categorized as CVSS v3.1 with base score 6.1 (Medium), with Network attack vector, no privileges required, user interaction required, and a changed sc...
CVE-2022-4279
A vulnerability classified as problematic has been found in SourceCodester Human Resource Management System 1.0. Affected is an unknown function of the file /hrm/employeeview.php. The manipulation of the argument search leads to cross site scripting. It is possible to launch the attack remotely...
PT-2022-26581 · Sourcecodester · Sourcecodester Human Resource Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Management System version 1.0 Description: A problematic issue has been discovered, affecting an unknown function of the file /hrm/employeeview.php. The manipulation of the search argument leads to cross-site...
Human Resource Management System 跨站脚本漏洞
Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Human Resource Management System version 1.0, which stems from a problem with an unknown function in the file /hrm/employeeview.php, where manipulation of...
CVE-2022-45329
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter. This vulnerability allows attackers to access database information...
CVE-2022-45329
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter. This vulnerability allows attackers to access database information...
CVE-2022-45329: Improper Neutralization of Special Elements used in an SQL Command
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter. This vulnerability allows attackers to access database information...
AeroCMS SQL注入漏洞
AeroCMS is a content management system from AeroCMS Inc. in the United States. AeroCMS version v0.0.1 suffers from a security vulnerability that stems from the discovery of a contained SQL injection vulnerability via the Search parameter. An attacker exploits the vulnerability to access database...
Maxon ERP SQL注入漏洞
Maxon ERP is an ERP software from Maxon ERP, Inc. A security vulnerability exists in Maxon ERP that stems from an incorrect manipulation of the parameter tbsearch resulting in sql injection...
Huaxia ERP 安全漏洞
Huaxia ERP is an ERP software from Huaxia, China. A security vulnerability exists in Huaxia ERP that originates from an unknown method in the Retail Management component, where manipulation of the search parameter can lead to information disclosure...
U.S. Dept Of Defense: XSS via Client Side Template Injection on www.███/News/Speeches
Dear DoD - Team, I am able to execute javascript code on www.███████/News/Speeches. This endpoint has a search functionality with the parameter Search. The supplied value to this parameter gets embedded into the website. Furthermore the frontend of the website is presumably created with a templat...
Academy Learning Management System Reflective Cross-Site Scripting Vulnerability
Academy Learning Management System is an Academy Learning Management System from the Creativeitem team. The vulnerability is caused by the lack of effective filtering and escaping of user-supplied data in the Search parameter, which could be exploited to launch a reflective cross-site scripting...
Online Banking System SQL Injection Vulnerability (CNVD-2022-68376)
Online Banking System is an online banking system developed using PHP and MySQL. version v1.0 of Online Banking System has a security vulnerability that stems from a SQL injection issue in the search parameter in the /net-banking/beneficiary.php location. No details of the vulnerability are...