PT-2023-27676 · Unknown · Phpgurukul User Registration & Login/User Management System With Admin Panel

Name of the Vulnerable Software and Affected Versions: Phpgurukul User Registration & Login and User Management System With admin panel version 3.0 Description: The issue allows attackers to run arbitrary code via the fname, lname, email, and contact fields of the user registration page. This is ...

User Management System and User Registration & Login and User Management System Cross-Site Scripting Vulnerabilities

User Registration & Login and User Management System is a user management system with admin panel. A security vulnerability exists in Phpgurukul User Registration & Login and User Management System With admin panel version 3.0, which originates from a vulnerability that allows an attacker to run...

PT-2023-27677 · Unknown · Phpgurukul User Registration & Login/User Management System With Admin Panel

Name of the Vulnerable Software and Affected Versions: Phpgurukul User Registration & Login and User Management System With admin panel version 3.0 Description: The issue allows attackers to obtain sensitive information via a crafted string in the admin user name field on the admin log in page...

CVE-2023-44758

GDidees CMS 3.0 is affected by a Cross-Site Scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload to the Page Title...

CVE-2023-44075

Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a crafted payload to the Address parameter...

RiteCMS Cross-Site Scripting Vulnerability

RiteCMS is a website CMS. A security vulnerability exists in Rite CMS version 3.0 that stems from a cross-site scripting XSS vulnerability in the Home Page field...

CVE-2023-38390

Cross-Site Request Forgery CSRF vulnerability in Anshul Labs Mobile Address Bar Changer plugin = 3.0 versions...

CHINA Network huakecms SQL Injection Vulnerability

CHINA Network huakecms is a content management system from China Network. A SQL injection vulnerability exists in CHINA Network huakecms version 3.0, which stems from an incorrect operation of the parameter cid that can lead to sql injection...

PT-2023-29024 · Ritecms · Ritecms

Name of the Vulnerable Software and Affected Versions: Rite CMS version 3.0 Description: The issue allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu. This is a Cross-Site scripting XSS issue. Recommendations: For Rite CMS...

PT-2023-29023 · Ritecms · Ritecms

Name of the Vulnerable Software and Affected Versions: Rite CMS version 3.0 Description: The issue allows attackers to execute arbitrary code via a crafted payload into the Main Menu Items in the Administration Menu. This is a result of Multiple Cross-Site scripting XSS vulnerabilities...

Small CRM Cross-Site Scripting Vulnerability

PHPGurukul Small CRM is a customer relationship management system. A cross-site scripting vulnerability exists in Small CRM version v3.0, which originates from a vulnerability that allows an attacker to execute arbitrary web script or HTML via the name field using a crafted payload injection...

Skyworth OS Path Traversal Vulnerability

Skyworth OS is an operating system from Skyworth, a Chinese company. A path traversal vulnerability exists in Skyworth OS version 3.0. An attacker could exploit this vulnerability to read arbitrary files on the server running the application...

CVE-2023-41538

phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting XSS via the keyword parameter...

PT-2023-27965 · Phpjabbers · Phpjabbers Php Forum Script

Name of the Vulnerable Software and Affected Versions: phpjabbers PHP Forum Script version 3.0 Description: The issue concerns a Cross Site Scripting XSS flaw via the keyword parameter. This allows for potential malicious script injection, affecting the security of the application. Recommendation...

Car Rental Script 安全漏洞

Car Rental Script is an open source vehicle rental script by GZ Script. A security vulnerability exists in PHPJabbers Car Rental Script version 3.0, which stems from a lack of validation when changing e-mail addresses or passwords...

Food Delivery Script SQL注入漏洞

Food Delivery Script is an online food ordering system. A security vulnerability exists in PHPJabbers Food Delivery Script version 3.0, which is caused by a SQL injection vulnerability in the "q" parameter of the index.php file...

VulnCheck KEV: CVE-2023-39910

The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mersenne Twister PRNG restricts the internal entropy to 32 bits regardless of settings. This allows remote attackers to recover any wallet...

Bug Finder Listplace 跨站脚本漏洞

Bug Finder Listplace is a powerful directory listing platform from Bug Finder, Inc. A cross-site scripting vulnerability exists in Bug Finder Listplace version 3.0, which stems from an unknown function in file /listplace/user/coverPhotoUpdate in the component Photo Handler, leading to cross-site...

OpenSSL Information Disclosure Vulnerability (20230714) - Windows

OpenSSL is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...

PT-2023-25492 · Unknown · Nesote Inout Blockchain Fiatexchanger

Name of the Vulnerable Software and Affected Versions: Nesote Inout Blockchain FiatExchanger version 3.0 Description: A critical vulnerability has been found in the component POST Parameter Handler, affecting an unknown part of the file /index.php/coins/update marketboxslider. The manipulation of...