32563 matches found
CVE-2025-6118
A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been rated as critical. This issue affects some unknown processing of the file /vehicle/search of the component API. The manipulation of the argument vehicleTypeCode leads to sql injection. The attack may be initiate...
CVE-2025-6118 Das Parking Management System 停车场管理系统 API search sql injection
A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been rated as critical. This issue affects some unknown processing of the file /vehicle/search of the component API. The manipulation of the argument vehicleTypeCode leads to sql injection. The attack may be initiate...
CVE-2025-6117
A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been declared as critical. This vulnerability affects unknown code of the file /Reservations/Search of the component API. The manipulation of the argument Value leads to sql injection. The attack can be initiated...
CVE-2025-6116
A vulnerability was found in Das Parking Management System 停车场管理系统 6.2.0. It has been classified as critical. This affects an unknown part of the file /IntraFieldVehicle/Search of the component API. The manipulation of the argument Value leads to sql injection. It is possible to initiate the atta...
PHPGurukul Nipah virus Testing Management System 代码注入漏洞
Nipah Virus Testing Management System is an online virus diagnostic platform. A cross-site scripting vulnerability exists in the Nipah Virus Testing Management System due to improper handling of the serachdata parameter in the /search-report.php file. An attacker could use this vulnerability to...
Apache Tomcat 11.0.0.M1 < 11.0.8 multiple vulnerabilities
The version of Tomcat installed on the remote host is prior to 11.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat11.0.8security-11 advisory. - Untrusted Search Path vulnerability in Apache Tomcat installer for Windows. During installation, the...
PT-2025-25566 · Unknown · Phpgurukul Nipah Virus Testing Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Nipah Virus Testing Management System version 1.0 Description: A vulnerability was found in the system, affecting some unknown functionality of the file /search-report.php. The manipulation of the serachdata argument leads to...
Das Parking Management System SQL注入漏洞
Das Parking Management System is a parking management system from Das Corporation. A SQL injection vulnerability exists in Das Parking Management System version 6.2.0, which is caused by incorrect manipulation of the parameter vehicleTypeCode in the file /vehicle/search...
Das Parking Management System SQL注入漏洞
Das Parking Management System is a parking management system from Das Corporation. A SQL injection vulnerability exists in Das Parking Management System version 6.2.0, which originates from an incorrect manipulation of the parameter Value in the file /Reservations/Search, resulting in SQL injecti...
PT-2025-25529 · Unknown · Phoenix Site Cms
Name of the Vulnerable Software and Affected Versions: Phoenix Site CMS versions affected versions not specified Description: A Reflected Cross Site Scripting XSS issue was found in the "/search" endpoint, allowing remote attackers to execute arbitrary code via the s GET parameter. Recommendation...
Apache Tomcat 10.1.0.M1 < 10.1.42 multiple vulnerabilities
The version of Tomcat installed on the remote host is prior to 10.1.42. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.42security-10 advisory. - Untrusted Search Path vulnerability in Apache Tomcat installer for Windows. During installation, th...
The vulnerability of the ACL-policy search mechanism based on application prefixing by the Nomad orchestrator allows attackers to bypass existing security mechanisms.
The vulnerability of the ACL-policy-based search mechanism of the Nomad application lies in the improper assignment of access control rules. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms by creating tasks with special prefix names...
Apache Tomcat 9.0.0.M1 < 9.0.106 multiple vulnerabilities
The version of Tomcat installed on the remote host is prior to 9.0.106. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat9.0.106security-9 advisory. - Untrusted Search Path vulnerability in Apache Tomcat installer for Windows. During installation, the...
The vulnerability of the Web Intelligence component of the SAP BusinessObjects Business Intelligence platform allows a perpetrator to upload arbitrary files.
The vulnerability of the Web Intelligence component of the SAP BusinessObjects Business Intelligence platform is related to the use of an unreliable search path. Exploiting this vulnerability allows attackers to upload arbitrary files...
CVE-2025-6083
In ExtremeCloud Universal ZTNA, a syntax error in the 'searchKeyword' condition caused queries to bypass the ownerid filter. This issue may allow users to search data across the entire table instead of being restricted to their specific ownerid...
GHSA-86XF-2MGP-GV3G starcitizentools/citizen-skin allows stored XSS in search no result messages
Summary The citizen-search-noresults-title and citizen-search-noresults-desc system messages are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. Details The system messages are inserted as raw HTML by the mustache template:...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the citizen-search-noresults-title and citizen-search-noresults-desc system messages being inserted as raw HTML. An attacker can execute arbitrary HTML or JavaScript code in the context of users who view the...
starcitizentools/citizen-skin allows stored XSS in search no result messages
Summary The citizen-search-noresults-title and citizen-search-noresults-desc system messages are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. Details The system messages are inserted as raw HTML by the mustache template:...
