Atlassian Jira 7.13.x < 7.13.4 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is version 7.13.0 prior to 7.13.4 or 8.0.0 prior to 8.1.1. It is, therefore, affected by multiple vulnerabilities: - A vulnerability which permits remote attackers to inject arbitrary HTM...

Combodo iTop security vulnerabilities

Combodo iTop is a French company Combodo ITIL-based development and for the daily operation of the IT environment of open source Web applications. The program provides incident management, configuration management and problem management. A security vulnerability exists in Combodo iTop versions...

Atlassian Jira 8.0.0 < 8.1.1 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is version 7.13.0 prior to 7.13.4 or 8.0.0 prior to 8.1.1. It is, therefore, affected by multiple vulnerabilities: - A vulnerability which permits remote attackers to inject arbitrary HTM...

CVE-2023-1365

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The...

CVE-2023-1365: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The...

PT-2023-16930 · Sourcecodester · Sourcecodester Computer Parts Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Parts Sales and Inventory System version 1.0 Description: A problematic issue was found in the Add User Account component, where the manipulation of the username argument leads to cross-site scripting. This issue can b...

PT-2023-16932 · Unknown · Sourcecodester Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /admin/ajax.php. The manipulation of the username argument leads to SQL injection...

Computer Parts Sales and Inventory System Cross-site Scripting Vulnerabilities

Computer Parts Sales and Inventory System is a computer parts sales and inventory system by Warren Daloyan, an individual developer. A cross-site scripting vulnerability exists in SourceCodester Computer Parts Sales and Inventory System version 1.0, which stems from an unknown function present in...

Online Pizza Ordering System SQL Injection Vulnerability

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Pizza Ordering System version 1.0, which was discovered to contain an SQL injection vulnerability via the username parameter...

CVE-2023-1363: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add User Account. The manipulation of the argument username leads to cross site scripting. It is possible to launch the...

CVE-2023-1360

A vulnerability was found in SourceCodester Employee Payslip Generator with Sending Mail 1.2.0 and classified as critical. This issue affects some unknown processing of the file classes/Users.php?f=save of the component New User Creation. The manipulation of the argument username leads to sql...

CVE-2023-1360: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Employee Payslip Generator with Sending Mail 1.2.0 and classified as critical. This issue affects some unknown processing of the file classes/Users.php?f=save of the component New User Creation. The manipulation of the argument username leads to sql...

Simple Bakery Shop Management SQL Injection Vulnerability

Simple Bakery Shop Management is a bakery store management system. A SQL injection vulnerability exists in SourceCodester Simple Bakery Shop Management System version 1.0, which stems from a SQL injection vulnerability in the parameter sername/password...

SourceCodester Employee Paycheck Generator with SQL Injection Vulnerability for Email Sending

Employee Payslip Generator with Sending Mail is an Employee Payslip Generator with Sending Mail by Carlo Montero Personal Developer. SourceCodester Employee Payslip Generator with Sending Mail version 1.2.0 suffers from a SQL injection vulnerability that stems from an incorrect manipulation of th...

PT-2023-16926 · Sourcecodester · Sourcecodester Gadget Works Online Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Gadget Works Online Ordering System version 1.0 Description: A vulnerability has been found in the SourceCodester Gadget Works Online Ordering System, affecting the component Add New User. The issue is related to the manipulati...

CVE-2023-1357: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation of the argument username/password with the input admin' or 1=1 -- leads...

TeamPass Password Manager File Deletion

The vulnerability of the TeamPass password manager is related to improper external management of the username or file path. Exploiting this vulnerability allows a malicious actor to delete any files at will...

CVE-2023-1294

A vulnerability was found in SourceCodester File Tracker Manager System 1.0. It has been classified as critical. Affected is an unknown function of the file /filemanager/login.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is...

PT-2023-16868 · Sourcecodester · Sourcecodester File Tracker Manager System

Name of the Vulnerable Software and Affected Versions: SourceCodester File Tracker Manager System version 1.0 Description: A critical issue has been found in the SourceCodester File Tracker Manager System. The problem lies in an unknown function of the file /file manager/login.php, specifically i...

SourceCodester Sales Tracker Management System SQL Injection Vulnerability

Sales Tracker Management System is a sales tracker management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Sales Tracker Management System version 1.0 due to unknown functionality in the file filemanager/login.php in the component POST Paramet...