EUVD-2022-25247

Malicious code in bioql PyPI...

EUVD-2022-25248

Malicious code in bioql PyPI...

CVE-2024-33302

SourceCodester Product Show Room 1.0 and before is vulnerable to Cross Site Scripting XSS via "Middle Name" under Add Users...

CVE-2024-33304

SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "Last Name" under Add Users...

CVE-2022-1980

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=systeminfo/contactinfo. The manipulation of the textbox Telephone with the input leads to cross site scripting. The attack may be initiated remotely b...

CVE-2022-1979

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input leads to cross site scripting. The attack can be initiated remotely but requires authentication...

CVE-2024-33302

The SourceCodester Product Show Room (versions 1.0 and before) is vulnerable to Cross Site Scripting (XSS) . The vulnerability is caused by the improper neutralization of input in the Middle Name parameter located under the Add Users section, allowing for potential malicious script injection. Pra...

CVE-2024-33303

The SourceCodester Product Show Room 1.0 and prior versions are vulnerable to a Cross-Site Scripting (XSS) flaw. The root cause is a lack of proper input validation and sanitization for the First Name parameter located under the Add Users feature. This vulnerability allows for potential malicious...

CVE-2024-33304

SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting XSS via "Last Name" under Add Users...

CVE-2022-1979

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input alert1 leads to cross site scripting. The attack can be initiated remotely but requires...

CVE-2022-1979 SourceCodester Product Show Room Site p=contact cross site scripting

A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input alert1 leads to cross site scripting. The attack can be initiated remotely but requires...