Project Worlds Life Insurance Management System SQL注入漏洞

Project Worlds Life Insurance Management System is a life insurance management system from Project Worlds, Inc. A SQL injection vulnerability exists in Project Worlds Life Insurance Management System version 1.0, which stems from the fact that incorrect manipulation of the parameter nomineeid can...

PT-2024-16473 · Unknown · Code-Projects Wazifa System

Name of the Vulnerable Software and Affected Versions: code-projects Wazifa System version 1.0 Description: A critical issue was found in the code-projects Wazifa System, affecting an unknown part of the file /controllers/logincontrol.php. The manipulation of the username argument leads to SQL...

PT-2024-16505 · Unknown · Code-Projects E-Health Care System

Name of the Vulnerable Software and Affected Versions: code-projects E-Health Care System version 1.0 Description: A critical vulnerability has been found in the code-projects E-Health Care System, affecting the file /Users/registration.php. The manipulation of the argument f name leads to SQL...

PT-2024-33064 · Oasys · Oasys

Name of the Vulnerable Software and Affected Versions: oasys version 1.1 Description: The issue in the component /logins allows attackers to access sensitive information via a burst attack. Recommendations: For oasys version 1.1, consider restricting access to the /logins component to minimize th...

WordPress plugin Send Emails with Mandrill 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Floodlight OpenFlow Controller 安全漏洞

Floodlight OpenFlow Controller OSS is a Java-based open source enterprise SDN controller from Floodlight Open Source. A security vulnerability exists in Floodlight OpenFlow Controller version 1.2, which stems from allowing local hosts to construct fake LLDP packets, which can lead to hosts inside...

PT-2024-30837 · Unknown · Revivenews

Name of the Vulnerable Software and Affected Versions: ReviveNews versions 1.0.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by Access Control Lists ACLs. This means that certain features or...

LB-LINK BL-WR 1300H 安全漏洞

The LB-LINK BL-WR 1300H is a wireless dual-band gigabit router from China Bilink LB-LINK. A security vulnerability exists in the LB-LINK BL-WR 1300H version v.1.0.4, which stems from the use of hard-coded credentials in /etc/shadow...

CVE-2024-40490

An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function...

oasys 安全漏洞

oasys is an OA automated office system by the individual developer of Programmer Second Senior Brother Programmer Second Senior Brother. A security vulnerability exists in oasys v1.1. An attacker exploiting this vulnerability can access sensitive information via a burst attack...

CVE-2024-51065

Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter...

WordPress WP EASY RECIPE plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin WP EASY RECIPE versions = 1.6...

SourceCodester Online Diagnostic Lab Management System 安全漏洞

SourceCodester Online Diagnostic Lab Management System is an online diagnostic lab management system from SourceCodester open source. A security vulnerability exists in SourceCodester Online Diagnostic Lab Management System version v.1.0. A remote attacker can exploit this vulnerability to execut...

PT-2024-34508 · Unknown · Projectworlds Online Admission System

Name of the Vulnerable Software and Affected Versions: Projectworlds Online Admission System version v1 Description: The issue is related to SQL Injection in the index.php file via the a id parameter. This allows for potential exploitation. No information is provided about the estimated number of...

Kerui HD 3MP 1080P Tuya Camera 安全漏洞

Kerui HD 3MP 1080P Tuya Camera is a high-definition surveillance camera from Kerui. A security vulnerability exists in Kerui HD 3MP 1080P Tuya Camera version 1.0.4, which stems from the presence of a command injection vulnerability that allows an attacker to create a customized, unauthenticated Q...

CVE-2024-51075

A Reflected Cross Site Scripting XSS vulnerability was found in /odms/admin/user-search.php in PHPGurukul Online DJ Booking Management System v1.0, which allows remote attackers to execute arbitrary code via the searchdata parameter...

CVE-2024-51181

A Reflected Cross Site Scripting XSS vulnerability was found in /ifscfinder/admin/profile.php in PHPGurukul IFSC Code Finder Project v1.0, which allows remote attackers to execute arbitrary code via " searchifsccode" parameter...

WordPress plugin Tida URL Screenshot 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PHPGurukul Online DJ Booking Management System 安全漏洞

PHPGurukul Online DJ Booking Management System is an online DJ booking management system from PHPGurukul. A security vulnerability exists in PHPGurukul Online DJ Booking Management System v1.0, which originates from a reflected cross-site scripting vulnerability in the searchdata parameter of the...

PT-2024-34518 · Unknown · Phpgurukul Online Dj Booking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online DJ Booking Management System version 1.0 Description: A Reflected Cross Site Scripting XSS issue was found in the "/odms/admin/booking-search.php" API endpoint, allowing remote attackers to execute arbitrary code via the...