346 matches found
EUVD-2026-92841
A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function mysqliquery of the file locateus.php of the component Doctor Search Endpoint. The manipulation of the argument doctorname leads to sql...
CVE-2026-105470
The girishsaraf Online-Appointment-Booking-System (up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5 ) is vulnerable to a SQL injection in the Doctor Search Endpoint component. The flaw exists within the mysqli_query function of the locateus.php file, where improper handling of the doctorname...
EUVD-2026-92402
A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController::index of the file App/Feelcrm/Index/Controller/GroupController.class.php of the component Department Search Endpoint. The manipulation of the argument keyword leads to cross...
CVE-2026-105291 feelec-yishu feelcrm-os Department Search Endpoint GroupController.class.php index cross site scripting
A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController::index of the file App/Feelcrm/Index/Controller/GroupController.class.php of the component Department Search Endpoint. The manipulation of the argument keyword leads to cross...
CVE-2026-105291 feelec-yishu feelcrm-os Department Search Endpoint GroupController.class.php index cross site scripting
A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController::index of the file App/Feelcrm/Index/Controller/GroupController.class.php of the component Department Search Endpoint. The manipulation of the argument keyword leads to cross...
CVE-2026-105291
The software feelec-yishu feelcrm-os 1.0.0 contains a cross-site scripting (XSS) vulnerability in the Department Search Endpoint component. The root cause is located in the GroupController::index function within the file App/Feelcrm/Index/Controller/GroupController.class.php, where the manipulati...
CVE-2026-33146
CVE-2026-33146 페이지 트리에서는 공유 항목이 깨끗해 보였지만, 검색 엔드포인트는 다른 이야기를 전했습니다. Docmost에서, 공개 공유 보기에서 숨겨진 제한된 하위 페이지가 여전히 공개 공유 검색 결과를 통해 유출될 수 있었습니다. 소개 Docmost오픈소스 협업 위키 및 문서화 플랫폼를 검토하던 중 아주 간단한 질문에서 이 문제를 발견했습니다. 의도적으로 공개 공유 보기에서 숨겨진 페이지가 있다면, 모든 공개 기능이 동일한 제한 경계를 존중하는가? 이 경우, 답은 '아니오'였습니다. 제한된 하위 페이지는 공개 ...
CVE-2023-51504
CVE-2023-51504 MotoCMS SQL 인젝션익스플로잇 DB 참조의 도커화된 재현입니다. 설명 MotoCMS 버전 3.4.3 SQL 인젝션: 링크 https://template189526.motopreview.com/store/category/search/?keyword=1 에서 keyword 파라미터를 통해 발생 취약점 재현은 Dockerfile에서 칼리 리눅스 머신을 재현하고 sqlmap을 실행하여 취약점 결과를 탐지 및 표시하는 데 필요한 명령어나 지침을 정의하는 과정을 포함했습니다. 결과를 얻으려면 다음 명령어...
CVE-2022-22980
SpEL RCE Exploit - CVE-2022-22980 Spring Data에서 SpELSpring Expression Language 주입을 통한 원격 코드 실행RCE 익스플로잇입니다. 설명 취약점 이 박스는 trackingid 매개변수를 받는 /search 엔드포인트를 노출하며, 이 매개변수는 SpEL 주입에 취약합니다. 이 주입을 통해 서버에서 직접 악성 Java 표현식을 실행할 수 있습니다. 익스플로잇 원리 1. Runtime.getRuntime.exec를 통해 셸 명령어를 실행하는 SpEL 표현식 주입 2. 명령...
CVE-2025-63572
설명 SQL 인젝션 취약점이 플랫폼 클라이언트 검색을 담당하는 엔드포인트Zentrajuris v.1.0에서 발견되었습니다. 검색 매개변수로 전송된 사용자 입력은 적절한 살균/파라미터화 없이 SQL 쿼리에 직접 연결되어, 공격자가 쿼리를 조작할 수 있게 합니다. 영향을 받는 엔드포인트 iqopgbljnxmxlzvzbvgy.supabase.co/rest/v1/clients 페이로드 예시 파라미터 ?select=&limit=100 을 추가하고 Accept 헤더를 application/json으로 변경하세요. 개념 증명 PoC 영향 ...
CVE-2026-103530
A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the component Search Endpoint. Performing a manipulation of the argument provideroptions.baseUrl results in server-side request forgery. The attack...
CVE-2026-103530: Server-Side Request Forgery (SSRF)
A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the component Search Endpoint. Performing a manipulation of the argument provideroptions.baseUrl results in server-side request forgery. The attack...
CVE-2026-103530 decolua 9Router Search Endpoint ssrfGuard.js fetch server-side request forgery
A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the component Search Endpoint. Performing a manipulation of the argument provideroptions.baseUrl results in server-side request forgery. The attack...
CVE-2026-103530
The decolua 9Router software (up to version 0.5.55 ) is vulnerable to a server-side request forgery (SSRF) . The flaw exists within the fetch function of the src/shared/utils/ssrfGuard.js file, specifically located in the Search Endpoint component. An attacker can initiate this attack remotely by...
CVE-2026-103530 decolua 9Router Search Endpoint ssrfGuard.js fetch server-side request forgery
A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the component Search Endpoint. Performing a manipulation of the argument provideroptions.baseUrl results in server-side request forgery. The attack...
CVE-2026-103530 decolua 9Router Search Endpoint ssrfGuard.js fetch server-side request forgery
A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the component Search Endpoint. Performing a manipulation of the argument provideroptions.baseUrl results in server-side request forgery. The attack...
CVE-2026-103116
A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component Student List Search Endpoint. This manipulation of the argument LOsort causes sql injection. The attack can be initiated remotely. The...
CVE-2026-103116
A SQL injection vulnerability exists in OS4ED openSIS-Classic versions up to 9.3 . The flaw is located within the DBQuery function of the functions/GetStuListFnc.php file in the Student List Search Endpoint component. The vulnerability is triggered by the manipulation of the LO_sort argument, all...
CVE-2026-103116 OS4ED openSIS-Classic Student List Search Endpoint GetStuListFnc.php DBQuery sql injection
A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component Student List Search Endpoint. This manipulation of the argument LOsort causes sql injection. The attack can be initiated remotely. The...
EUVD-2026-89947
A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component Student List Search Endpoint. This manipulation of the argument LOsort causes sql injection. The attack can be initiated remotely. The...