112 matches found
WordPress plugin FooGallery 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
CVE-2024-13213
CVE-2024-13213 affects SingMR HouseRent 1.0 via /toAdminUpdateHousePage?hID=30, enabling cross-site scripting. The issue arises from manipulated input in that endpoint. The CVE is documented with a remote attack vector; public disclosure is indicated. NVD lists CVSSv3.1 base score 5.4 (MEDIUM) wi...
HouseRent 代码注入漏洞
HouseRent is a house rental management system by Mr.W individual developer. It provides an auto-caching JWK-Set HTTP client. A code injection vulnerability exists in HouseRent version 1.0, which stems from unknown code in the file /toAdminUpdateHousePage?hID=30 that can lead to cross-site scripti...
CVE-2024-12488
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/subjectupdate.php. The manipulation of the argument id leads to sql injection. The attack may be launched...
PT-2024-17621 · Unknown · Code-Projects Online Class/Exam Scheduling System
Name of the Vulnerable Software and Affected Versions: code-projects Online Class and Exam Scheduling System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /pages/subject update.php. The manipulation of the id argument leads to...
Code-Projects Online Class and Exam Scheduling System 安全漏洞
Code-Projects Online Class and Exam Scheduling System is an online class and exam scheduling system from Code-Projects, Inc. A security vulnerability exists in Code-Projects Online Class and Exam Scheduling System version 1.0, which stems from an SQL injection vulnerability contained in the id...
code-projects Blood Bank System SQL注入漏洞
Code-Projects Blood Bank System is a Code-Projects open source blood bank management system. A SQL injection vulnerability exists in code-projects Blood Bank System version 1.0, which originates from an SQL injection issue in the name parameter of the /update.php page...
CVE-2024-42560
A cross-site scripting XSS vulnerability in the component updatepagedetails.php of Blood Bank And Donation Management System commit dc9e039 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Details parameter...
CVE-2024-42560
A cross-site scripting XSS vulnerability in the component updatepagedetails.php of Blood Bank And Donation Management System commit dc9e039 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Details parameter...
Blood-Bank-&-Donation-Management-System 安全漏洞
Blood-Bank-&-Donation-Management-System is a blood bank and blood donation management system by Varun Sardana, an individual developer. A security vulnerability exists in Blood-Bank-&-Donation-Management-System that stems from a cross-site scripting vulnerability contained in the...
Online Exam System 安全漏洞
Online Exam System is an online exam system by oretnom23 individual developers. A security vulnerability exists in Online Exam System v1.0, which originated when the /admin/update.php and /admin/dashboard.php pages were found to contain an access control vulnerability...
PT-2024-38485 · Gila Cms · Gila Cms
Name of the Vulnerable Software and Affected Versions: Gila CMS version 1.10.9 Description: A problematic issue was found in Gila CMS, affecting an unknown part of the file /cm/update rows/page?id=2 within the HTTP POST Request Handler component. The manipulation of the content argument leads to...
PT-2024-37997 · Itsourcecode · Itsourcecode University Management System
Name of the Vulnerable Software and Affected Versions: itsourcecode University Management System version 1.0 Description: A critical issue was found in the Avatar File Handler component of the itsourcecode University Management System, specifically affecting the file /st update.php. The...
CVE-2024-5607
The GDPR CCPA Compliance & Cookie Consent Banner plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions named ajaxUpdateSettings in all versions up to, and including, 2.7.0. This makes it possible for authenticated attackers,...
CVE-2024-2998
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Store Update Page. The manipulation of the argument Store Name/Store Address leads to cross site...
CVE-2024-2998
The CVE-2024-2998 entry concerns the Bdtask Multi-Store Inventory Management System (up to 20240320). The vulnerability affects the Store Update Page where manipulating the Store Name/Store Address parameter can trigger cross-site scripting (XSS). The issue is described as exploitable remotely an...
CVE-2024-2998 Bdtask Multi-Store Inventory Management System Store Update Page cross site scripting
A vulnerability was found in Bdtask Multi-Store Inventory Management System up to 20240320. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Store Update Page. The manipulation of the argument Store Name/Store Address leads to cross site...
PT-2024-23175 · Unknown · Bdtask Multi-Store Inventory Management System
Name of the Vulnerable Software and Affected Versions: Bdtask Multi-Store Inventory Management System versions up to 20240320 Description: A problematic issue was found in the Store Update Page component of the Bdtask Multi-Store Inventory Management System. The manipulation of the Store Name and...
Inventory Management System 跨站脚本漏洞
Inventory Management System is an inventory management system for stemword individual developers. A cross-site scripting vulnerability exists in Bdtask Multi-Store Inventory Management System 20240320 and prior versions, which stems from a cross-site scripting XSS vulnerability in the component...