279 matches found
Read-only users can restore old versions
None...
Insurance Management System PHP and MySQL 1.0 - Multiple Stored XSS
Exploit Title:Insurance Management System PHP and MySQL 1.0 - Multiple Stored XSS Date: 2024-02-08 Exploit Author: Hakkı TOKLU Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/16995/insurance-management-system-php-mysql.html Version: 1.0 Tested on:...
CVE-2024-25854
Cross Site Scripting XSS vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket...
Cross site scripting
Cross Site Scripting XSS vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket...
CVE-2024-25854
Cross Site Scripting XSS vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket...
PT-2024-21166 · Sourcecodester · Sourcecodester Insurance Management System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Insurance Management System version 1.0 Description: A Cross Site Scripting XSS issue allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket. This enables attackers to...
CVE-2024-25854
Cross Site Scripting XSS vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket...
CVE-2023-46967
Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows a remote attacker to escalate privileges via a crafted support ticket...
CVE-2023-46967
CVE-2023-46967 involves a Cross Site Scripting vulnerability in the sanitize function of Enhancesoft osTicket 1.18.0 . The underlying issue allows a remote attacker to escalate privileges via a crafted support ticket. Core details from the connected documents confirm the affected software and the...
CVE-2023-46967
Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows a remote attacker to escalate privileges via a crafted support ticket...
Open redirect in user_saml via RelayState parameter
None...
Self XSS when sending HTML as a comment in the Deck app
None...
CVE-2023-51547
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPManageNinja LLC Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin.This issue affects Fluent Support – WordPress Helpdesk and Customer Support Ticket Plugin: from n/a through...
CVE-2023-51547
CVE-2023-51547 affects Fluent Support (WordPress plugin) up to version 1.7.6. It is an authenticated SQL Injection caused by improper neutralization of input in SQL commands. Impact per sources is high; patch status is Patched, but no fixed version is specified in the provided documents. Recommen...
inTouch 1.0 File Upload - Remote Code Execution Vulnerability
Title: inTouch-1.0 File Upload - RCE Author: nu11secur1ty Vendor: https://codecanyon.net/user/media-city Software: https://codecanyon.net/item/intouch-laravel-support-ticket-management-system/35177425?srank=2 Reference: https://portswigger.net/web-security/file-upload,...
Users can make external storage mount points inaccessible for other users
None...
user_ldap app logs user passwords in the log file on level debug
None...
Admins can change authentication details of user configured external storage
None...