119 matches found
Sourcecodester Vehicle Service Management System SQL注入漏洞
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. SourceCodester Vehicle Service Management System version 1.0 SQL injection vulnerability , the vulnerability stems from the path...
Information Leakage Vulnerabilities in the Intelligent Customer Service System of Beijing Qimo Technology Co.
Beijing SevenStranger Technology Co., Ltd. is a technology company with AI and communication technology as its core and data as its driving force. An information leakage vulnerability exists in the intelligent customer service system of Beijing Seven Mor Technology Co. Ltd, which can be exploited...
CVE-2022-30052
In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...
CVE-2022-30052
CVE-2022-30052 affects Home Clean Service System 1.0. Affected component: password handling parameter; underlying issue is SQL injection in the password field. Documented impact per CVSS: high severity (CVSS v2 base 7.5, CVSS v3.1 base 9.8) with network attack vector, no authentication, and parti...
CVE-2021-46079
An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...
CVE-2021-46079
An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...
CVE-2021-46078
An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability...
CVE-2021-46073
A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in login panel...
CVE-2021-46074
A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel...
CVE-2021-46076
Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution...
CVE-2021-46080
A Cross Site Request Forgery CSRF vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability...
Sourcecodester Vehicle Service Management System 跨站脚本漏洞
Sourcecodester Vehicle Service Management System is an open source PHP project. Sourcecodester Vehicle Service Management System has a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in the WEB application, which can be exploited by attackers t...
Sourcecodester Vehicle Service Management System 跨站脚本漏洞
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. Sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from the vulnerability stem...
Sourcecodester Vehicle Service Management System 安全漏洞
Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. Sourcecodester Vehicle Service Management System has an elevation of privilege vulnerability that could be exploited by attackers to access...
CVE-2021-3735
A deadlock issue was found in the AHCI controller device of QEMU. It occurs on a software reset ahciresetport while handling a host-to-device Register FIS Frame Information Structure packet from the guest. A privileged user inside the guest could use this flaw to hang the QEMU process on the host...
XSS Vulnerability in Meiqiao Online Customer Service System
Chengdu Meichai Network Technology Co., Ltd. provides one-stop customer interaction SaaS services; at present, Meichai has online customer service, call center and customer service robots and other products, which are committed to helping enterprises and customers to improve the efficiency of...
Logic flaw vulnerabilities in the public resources trading e-service system
Beijing Zhulong Information Technology Co., Ltd. is a high-tech enterprise focusing on the field of electronic bidding and procurement. A logic flaw vulnerability exists in the public resource transaction electronic service system. Attackers can utilize the vulnerability to bypass the...
MGASA-2021-0174 Updated kernel packages fix security vulnerabilities
This kernel update is based on upstream 5.10.27 and fixes at least the following security issues: The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions...
Information leakage vulnerability in the omni-channel customer service system of Foshan Beame Information Technology Co.
Foshan Beamy Information Technology Co., Ltd. is an Internet software company. There is an information leakage vulnerability in the omni-channel customer service system of Foshan Beamy Information Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...
Omni-channel customer service system of Foshan Beame Information Technology Co., Ltd. suffers from arbitrary file reading vulnerability
Foshan Beamy Information Technology Co., Ltd. is an Internet software company. There is an arbitrary file reading vulnerability in the omni-channel customer service system of Foshan Bemis Information Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...