1465 matches found
CVE-2022-40121: Improper Neutralization of Special Elements used in an SQL Command
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/managecustomers.php...
PT-2022-25225 · Unknown · Online Banking System
Name of the Vulnerable Software and Affected Versions: Online Banking System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the search parameter at the "/net-banking/manage customers.php" API endpoint. Recommendations: For...
Exploit for Cross-site Scripting in Creativeitem Academy_Learning_Management_System
CVE-2022-38553 CROSS SITE SCRIPTING XSS ON "ACADEMY LEARNING...
CVE-2022-35115
IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...
Sql injection
IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...
CVE-2022-35115: Improper Neutralization of Special Elements used in an SQL Command
IceWarp WebClient DC2 - Update 2 Build 9 13.0.2.9 was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php...
PT-2022-22920 · Unknown · Inventory Management System
Name of the Vulnerable Software and Affected Versions: InventoryManagementSystem version 1.0 Description: A SQL injection issue allows attackers to execute arbitrary SQL commands via the searchTxt parameter. Recommendations: For InventoryManagementSystem version 1.0, consider restricting access t...
PT-2022-22869
Name of the Vulnerable Software and Affected Versions eShop - Multipurpose Ecommerce Store Website version 3.0.4 Description A Cross-site scripting XSS issue exists in the json search parse and the json response, allowing remote attackers to inject arbitrary web script or HTML via the "get...
GHSA-XXC2-J7JJ-6G5M Raneto Denial of Service via crafted payload injected into `Search` parameter
An issue in Renato v0.17.0 allows attackers to cause a Denial of Service DoS via a crafted payload injected into the Search parameter...
Raneto Denial of Service via crafted payload injected into `Search` parameter
An issue in Renato v0.17.0 allows attackers to cause a Denial of Service DoS via a crafted payload injected into the Search parameter...
CVE-2022-35142
An issue in Renato v0.17.0 allows attackers to cause a Denial of Service DoS via a crafted payload injected into the Search parameter...
CVE-2022-35142
An issue in Renato v0.17.0 allows attackers to cause a Denial of Service DoS via a crafted payload injected into the Search parameter...
Design/Logic Flaw
An issue in Renato v0.17.0 allows attackers to cause a Denial of Service DoS via a crafted payload injected into the Search parameter...
CVE-2022-35142
An issue in Renato v0.17.0 allows attackers to cause a Denial of Service DoS via a crafted payload injected into the Search parameter...
CVE-2022-35142
An issue in Renato v0.17.0 allows attackers to cause a Denial of Service DoS via a crafted payload injected into the Search parameter...
CVE-2022-35142: Improper Authentication
An issue in Renato v0.17.0 allows attackers to cause a Denial of Service DoS via a crafted payload injected into the Search parameter...
Renato 授权问题漏洞
Renato is an open source knowledge base platform that uses static Markdown files to power your knowledge base. A security vulnerability exists in Renato version v0.17.0, which stems from a vulnerability that allows an attacker to inject a crafted payload via the Search parameter, which can be...
PT-2022-4023 · Jenkins · Jenkins Lucene-Search Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Lucene-Search Plugin versions 370.v62a5f618cd3a and earlier Description: The issue exists due to the lack of protection for the web page structure. Exploitation of this issue may allow a remote attacker to conduct a cross-site scripti...
Simple Parking Management System 跨站脚本漏洞
Simple Parking Management System is a simple parking management system. A cross-site scripting vulnerability exists in Simple Parking Management System version 1.0, which originates from a cross-site scripting operation using the input "alert"XSS" for a parameter search. An attacker could exploit...
Directory Management System SQL Injection Vulnerability (CNVD-2022-58311)
Directory Management System is a directory management system by Anuj Kumar, a personal developer. A security vulnerability exists in Directory Management System v1.0, which can be exploited by an attacker to perform a SQL injection attack via the searchdata parameter in search-dirctory.php...