Online Bus Booking System SQL Injection Vulnerability

Online Bus Booking System is an online bus booking system. A SQL injection vulnerability exists in Online Bus Booking System v1.0, which is caused by the username parameter of the includes/login.php page not being sufficiently filtered, resulting in a SQL injection vulnerability...

Security Bulletin: IBM Storage Ceph is vulnerable to exposure of sensitive information to an unauthorized actor in Grafana (CVE-2022-39307)

Summary Grafana is used by IBM Storage Ceph as part of the dashboard to monitor the stats for each cluster. CVE-2022-39307 Vulnerability Details CVEID: CVE-2022-39307 DESCRIPTION: Grafana could allow a remote attacker to obtain sensitive information, caused by an error related to the use of the...

Security Bulletin: IBM Storage Ceph is vulnerable to improper authentication in Grafana (CVE-2022-39229)

Summary Grafana is used by IBM Storage Ceph as part of the dashboard to monitor the stats for each cluster. CVE-2022-39229 Vulnerability Details CVEID: CVE-2022-39229 DESCRIPTION: Grafana could allow a remote attacker to bypass security restrictions, caused by improper authentication. By using...

CVE-2023-46451

Best Courier Management System v1.0 is vulnerable to Cross Site Scripting XSS in the change username field...

CVE-2023-46451

Best Courier Management System v1.0 is vulnerable to Cross Site Scripting XSS in the change username field...

Cross site scripting

Best Courier Management System v1.0 is vulnerable to Cross Site Scripting XSS in the change username field...

SUSE CVE-2015-5189

Race condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames, which allows remote authenticated users to gain privileges by sending a command that is checked for security after another user is authenticated...

SUSE CVE-2017-7488

Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leak of information about existing usernames...

CVE-2023-46451

Best Courier Management System v1.0 is vulnerable to Cross Site Scripting XSS in the change username field...

CVE-2023-46451

Best Courier Management System v1.0 is vulnerable to Cross Site Scripting XSS in the change username field...

CVE-2023-46451: Improper Neutralization of Input During Web Page Generation

Best Courier Management System v1.0 is vulnerable to Cross Site Scripting XSS in the change username field...

Best Courier Management System Cross-Site Scripting Vulnerability

Best Courier Management System is a courier management system by Mayuri K. Individual developer. A security vulnerability exists in Best Courier Management System v1.0, which stems from a cross-site scripting XSS vulnerability in the change username field...

CVE-2023-5837

A vulnerability classified as problematic was found in AlexanderLivanov FotosCMS2 up to 2.4.3. This vulnerability affects unknown code of the file profile.php of the component Cookie Handler. The manipulation of the argument username leads to cross site scripting. The attack can be initiated...

CVE-2023-5837

A vulnerability classified as problematic was found in AlexanderLivanov FotosCMS2 up to 2.4.3. This vulnerability affects unknown code of the file profile.php of the component Cookie Handler. The manipulation of the argument username leads to cross site scripting. The attack can be initiated...

CVE-2023-46467

Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter of the registration page...

CVE-2023-5837: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in AlexanderLivanov FotosCMS2 up to 2.4.3. This vulnerability affects unknown code of the file profile.php of the component Cookie Handler. The manipulation of the argument username leads to cross site scripting. The attack can be initiated...

CVE-2023-46467: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter of the registration page...

Juzaweb CMS Cross-Site Scripting Vulnerability

Juzaweb CMS is a content management system developed by Juzaweb individual developers based on the Laravel framework and Web platform. A cross-site scripting vulnerability exists in Juzaweb CMS v.3.4 and earlier versions that could allow a remote attacker to execute arbitrary code by injecting a...

PT-2023-32369 · Alexanderlivanov · Fotoscms2

Name of the Vulnerable Software and Affected Versions: AlexanderLivanov FotosCMS2 versions up to 2.4.3 Description: A problematic vulnerability was found in the Cookie Handler component of the file profile.php, where the manipulation of the username argument leads to cross-site scripting. The...

FotosCMS2 Cross-Site Scripting Vulnerability

FotosCMS2 is a content management system by the individual developer Alexander Livanov. A cross-site scripting vulnerability exists in FotosCMS2 2.4.3 and earlier versions, which stems from the parameter username in the file profile.php that causes cross-site scripting...