65 matches found
CVE-2022-45009: Unrestricted Upload of File with Dangerous Type
Online Leave Management System v1.0 was discovered to contain an arbitrary file upload vulnerability at /leavesystem/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-3672
A vulnerability, which was classified as problematic, has been found in SourceCodester Sanitization Management System 1.0. This issue affects some unknown processing of the file /php-sms/classes/SystemSettings.php. The manipulation of the argument name/shortname leads to cross site scripting. The...
CVE-2022-3672: Improper Neutralization
A vulnerability, which was classified as problematic, has been found in SourceCodester Sanitization Management System 1.0. This issue affects some unknown processing of the file /php-sms/classes/SystemSettings.php. The manipulation of the argument name/shortname leads to cross site scripting. The...
CVE-2022-3672 SourceCodester Sanitization Management System SystemSettings.php cross site scripting
A vulnerability, which was classified as problematic, has been found in SourceCodester Sanitization Management System 1.0. This issue affects some unknown processing of the file /php-sms/classes/SystemSettings.php. The manipulation of the argument name/shortname leads to cross site scripting. The...
Home Owners Collection Management System Remote Code Execution Vulnerability
Home Owners Collection Management System is a homeowner collection management system. A remote code execution vulnerability exists in Home Owners Collection Management System, which originates from a parameter cover via SystemSettings.php. The remote code execution RCE vulnerability is caused by ...
CVE-2022-25094
Home Owners Collection Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the parameter "cover" in SystemSettings.php...
CVE-2022-25094
CVE-2022-25094 affects Home Owners Collection Management System v1.0. The vulnerability is a remote code execution (RCE) caused by handling of the cover parameter in SystemSettings.php, allowing an attacker to execute code on the vulnerable system. Multiple connected advisories and vendors corrob...
CVE-2022-25094
Home Owners Collection Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the parameter "cover" in SystemSettings.php...
PT-2022-17072
Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description The issue is related to a remote code execution RCE vulnerability. It can be exploited via the cover parameter in SystemSettings.php. Recommendations For Home Owners Collection...
Home Owners Collection Management System 安全漏洞
Home Owners Collection Management System is a homeowner collection management system. A remote code execution vulnerability exists in Home Owners Collection Management System, which originates from a parameter cover via SystemSettings.php. The remote code execution RCE vulnerability is caused by ...
CVE-2022-25094: Undefined Security Weakness
Home Owners Collection Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via the parameter "cover" in SystemSettings.php...
CVE-2021-46428
A Remote Code Execution RCE vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 and previous versions via the botavatar parameter in SystemSettings.php...
CVE-2021-46428
A Remote Code Execution RCE vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 and previous versions via the botavatar parameter in SystemSettings.php...
Remote code execution
A Remote Code Execution RCE vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 and previous versions via the botavatar parameter in SystemSettings.php...
CVE-2021-46428
CVE-2021-46428 affects Sourcecodester Simple Chatbot Application 1.0 (and earlier versions). The vulnerability is an RCE exposed via the bot_avatar parameter in SystemSettings.php, enabling remote code execution. The available sources indicate a high-severity impact with network access and no aut...
PT-2022-12703
Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Chatbot Application versions 1.0 and previous versions Description A Remote Code Execution RCE issue exists, allowing for potential code execution via the bot avatar parameter in SystemSettings.php. Recommendations For...
CVE-2021-46428: Unrestricted Upload of File with Dangerous Type
A Remote Code Execution RCE vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 and previous versions via the botavatar parameter in SystemSettings.php...
CVE-2021-38841
Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the systeminfo page in classes/SystemSettings.php with an updatesettings action...
Remote code execution
Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the systeminfo page in classes/SystemSettings.php with an updatesettings action...
CVE-2021-38841
Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the systeminfo page in classes/SystemSettings.php with an updatesettings action...