130 matches found
CVE-2022-48238
In Image filter, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...
AC Repair and Services System SQL注入漏洞
AC Repair and Services System is an air conditioning repair and services system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in AC Repair and Services System version 1.0, which stems from a misuse of the parameter id resulting in sql injection...
CVE-2023-2099
A vulnerability classified as problematic has been found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The...
CVE-2023-2097
A vulnerability was found in SourceCodester Vehicle Service Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack can be launched...
CVE-2023-2092
A vulnerability, which was classified as critical, has been found in SourceCodester Vehicle Service Management System 1.0. Affected by this issue is some unknown functionality of the file viewservice.php. The manipulation of the argument id leads to sql injection. The attack may be launched...
Sourcecodester Vehicle Service Management System SQL注入漏洞
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. SourceCodester Vehicle Service Management System version 1.0 SQL injection vulnerability exists , the vulnerability stems from the path...
Sourcecodester Vehicle Service Management System SQL注入漏洞
Sourcecodester Vehicle Service Management System is an open source PHP project. It is a simple web application for automotive repair/service stores or businesses. SourceCodester Vehicle Service Management System version 1.0 suffers from a SQL injection vulnerability, which originates from the...
Sourcecodester Vehicle Service Management System 跨站脚本漏洞
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. A cross-site scripting vulnerability exists in SourceCodester Vehicle Service Management System version 1.0, which originates from an unknow...
Sourcecodester Vehicle Service Management System SQL注入漏洞
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. SourceCodester Vehicle Service Management System version 1.0 SQL injection vulnerability , the vulnerability stems from the path...
Information Leakage Vulnerabilities in the Intelligent Customer Service System of Beijing Qimo Technology Co.
Beijing SevenStranger Technology Co., Ltd. is a technology company with AI and communication technology as its core and data as its driving force. An information leakage vulnerability exists in the intelligent customer service system of Beijing Seven Mor Technology Co. Ltd, which can be exploited...
CVE-2022-30052
In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...
CVE-2022-30052
CVE-2022-30052 affects Home Clean Service System 1.0. Affected component: password handling parameter; underlying issue is SQL injection in the password field. Documented impact per CVSS: high severity (CVSS v2 base 7.5, CVSS v3.1 base 9.8) with network attack vector, no authentication, and parti...
CVE-2022-30052: Improper Neutralization of Special Elements used in an SQL Command
In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...
CVE-2022-24844: Improper Neutralization of Special Elements used in an SQL Command
Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. The problem occurs in the following code in server/service/system/sysautocodepgsql.go, which means that PostgreSQL must be used as the database for this vulnerability to occu...
CVE-2021-46079
An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...
CVE-2021-46079
An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...
CVE-2021-46078
An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability...
CVE-2021-46073
A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in login panel...