CVE-2019-8978

CVE-2019-8978 Ellucian Banner Web Tailor 与 Banner Enterprise Identity Services 中的身份验证不当漏洞（CWE-287） 作者：Katie Mulliken [email protected] 致谢：卡内基梅隆大学 CERT 协调中心 信息 发现日期：2018 年 12 月 17 日 厂商：Ellucian Company L.P. 厂商主页：https://www.ellucian.com 产品：Banner Web Tailor 和 Banner Enterprise Identity Servic...

CVE-2025-69941

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1...

CVE-2025-69947

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1...

CVE-2025-69947

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1...

CVE-2025-69941

SourceCodester Tailor Management System version 1.0 is vulnerable to SQL Injection via the id parameter in the addmeasurement.php endpoint. This vulnerability allows for the execution of malicious SQL statements, potentially impacting the confidentiality, integrity, and availability of the databa...

CVE-2025-69947: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1...

CVE-2025-69941

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1...

PT-2026-66589

Name of the Vulnerable Software and Affected Versions SourceCodester Tailor Management System version 1.0 Description An issue exists that allows SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution. This occurs at the 'customeredit.php' endpoint...

EUVD-2025-210562

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1...

CVE-2025-69941

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1...

CVE-2025-69947

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1...

EUVD-2025-210563

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1...

CVE-2025-69947

SourceCodester Tailor Management System version 1.0 is vulnerable to SQL Injection due to improper neutralization of special elements used in an SQL command. The vulnerability exists in the customeredit.php endpoint via the id variable, which allows malicious SQL statements to be inserted and exe...

PT-2026-66588

Name of the Vulnerable Software and Affected Versions SourceCodester Tailor Management System version 1.0 Description An issue exists that allows SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, via the 'addmeasurement.php' endpoint using the...

CVE-2025-69941: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1...

CVE-2023-37507

Technical details for CVE-2023-37507 are not publicly available in the provided documents. The descriptions only state an information disclosure in HCL DevOps Plan. Monitor sources for updates and new technical details.

CVE-2026-29179

October is a Content Management System CMS and web platform. Prior to 3.7.16 and 4.1.16, fine-grained sub-permission checks for asset and blueprint file operations were not enforced in the CMS and Tailor editor extensions. This only affects backend users who were explicitly granted editor access...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the asset and blueprint file operations in the CMS and Tailor editor extensions. An attacker can gain unauthorized access to perform file operations such as create, delete, rename, move, or upload on theme...

CVE-2026-29179

October is a Content Management System CMS and web platform. Prior to 3.7.16 and 4.1.16, fine-grained sub-permission checks for asset and blueprint file operations were not enforced in the CMS and Tailor editor extensions. This only affects backend users who were explicitly granted editor access...

October CMS: Editor Sub-Permission Bypass for Asset and Blueprint File Operations

Fine-grained sub-permission checks for asset and blueprint file operations were not enforced in the CMS and Tailor editor extensions. This only affects backend users who were explicitly granted editor access but had editor.cmsassets or editor.tailorblueprints specifically withheld, an uncommon...