24 matches found
EUVD-2023-40137
Malicious code in bioql PyPI...
EUVD-2023-48406
Malicious code in bioql PyPI...
CVE-2024-51032
A Cross-site Scripting XSS vulnerability in managerecipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field...
CVE-2022-30837
Toll-tax-management-system v1.0 is vulnerable to Cross Site Scripting XSS via /ttms/classes/Master.php?f=saverecipient, vehiclename...
CVE-2022-30053
In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks...
CVE-2024-51032
A Cross-site Scripting XSS vulnerability in managerecipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field...
CVE-2024-51032: Improper Neutralization of Input During Web Page Generation
A Cross-site Scripting XSS vulnerability in managerecipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field...
CVE-2024-51032
A Cross-site Scripting XSS vulnerability in managerecipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field...
CVE-2024-51032
CVE-2024-51032 affects Sourcecodester Toll Tax Management System 1.0. The vulnerability is a Cross-site Scripting (XSS) in the file manage_recipient.php, exploitable by remote authenticated users via the owner input field. According to the sources, the impact is XSS with potential script injectio...
CVE-2023-44047
CVE-2023-44047 affects Sourcecodester Toll Tax Management System v1. The root cause is SQL Injection in the application (SQLi). CVSS v3.1: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H; base score 7.2 (HIGH). Exploitation would be via network access without user interaction, but the details of exploit patt...
PT-2023-29082 · Unknown · Sourcecodester Toll Tax Management System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Toll Tax Management System version v1 Description: The issue is related to SQL Injection, where an attacker can inject malicious SQL code to manipulate the database. This can lead to unauthorized access to sensitive data. The...
CVE-2023-44047: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Toll Tax Management System v1 is vulnerable to SQL Injection...
CVE-2023-36158
Cross Site Scripting XSS vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page...
Cross site scripting
Cross Site Scripting XSS vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page...
CVE-2023-36158: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page...
CVE-2023-36158
Cross Site Scripting XSS vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page...
Toll Tax Management System Cross-Site Scripting Vulnerability
Toll Tax Management System is a toll tax management system developed by Carlo Montero, an individual developer. A security vulnerability exists in Toll Tax Management System version 1.0, which can be exploited to run arbitrary code via the First Name and Last Name fields on the My Account page...
CVE-2023-36158
CVE-2023-36158 is an XSS vulnerability in sourcecodester Toll Tax Management System 1.0, exploitable via the First Name and Last Name fields on the My Account page. The linked sources consistently describe arbitrary code execution through user input, with no public exploit details provided in the...
CVE-2022-30837
CVE-2022-30837 affects Toll-tax-management-system v1.0. The vulnerability is a Cross Site Scripting (XSS) flaw in the API endpoint /ttms/classes/Master.php with the f parameter set to save_recipient and the vehicle_name field. Root cause is input handling in that endpoint allowing injection of sc...