PT-2024-23276 · Woocommerce · Acowebs Pdf Invoices/Packing Slips For Woocommerce

Name of the Vulnerable Software and Affected Versions: Acowebs PDF Invoices and Packing Slips For WooCommerce versions 1.3.7 and earlier Description: The issue is related to the deserialization of untrusted data. This can potentially lead to security issues when processing unverified input...

Online Examination System SQL注入漏洞

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. A SQL injection vulnerability exists in Online Examination System version 1.0, which originates from a SQL injection vulnerability in the pass parameter of the /adminpanel/admin/query/loginExe.php...

Online Book System SQL注入漏洞

Online Book System is an online booking system. A SQL injection vulnerability exists in code-projects Online Book System version 1.0, which originates from a SQL injection vulnerability in the value parameter of the /Product.php file...

PT-2024-23128 · Unknown · Active Websight Seo Backlink Monitor

Name of the Vulnerable Software and Affected Versions: Active Websight SEO Backlink Monitor versions 1.5.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attack...

Online Book System SQL注入漏洞

Online Book System is an online booking system. A SQL injection vulnerability exists in Online Book System version 1.0, which originates from a lack of validation of externally entered SQL statements in the ID parameter of the /description.php file. An attacker can exploit this vulnerability to...

PT-2024-23179 · Unknown · Code-Projects Online Book System

Name of the Vulnerable Software and Affected Versions: code-projects Online Book System version 1.0 Description: A critical issue has been found in the processing of the file /Product.php, where the manipulation of the argument value leads to sql injection. The attack may be initiated remotely. T...

House Rental Management System SQL注入漏洞

House Rental Management System is a house rental management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Campcodes House Rental Management System version 1.0, which originates from a SQL injection vulnerability in the parameter username in the file ajax.php...

Sourcecodester Mobile Shop System in PHP MySQL SQL注入漏洞

Sourcecodester Mobile Shop System in PHP MySQL is an online ordering system for Gadget Works developed in PHP/MySQLi. The main goal of this online ordering system is to improve customer convenience. A SQL injection vulnerability exists in Sourcecodester Mobile Shop System in PHP MySQL version 1.0...

PT-2024-22390 · Unknown · Campcodes Online Shopping System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping System version 1.0 Description: A vulnerability was found in the file /offersmail.php, where the manipulation of the email argument leads to cross-site scripting. The attack can be initiated remotely. Recommendations...

Online Marriage Registration System 跨站脚本漏洞

Online Marriage Registration System is a website builder that supports online marriage registration. A cross-site scripting vulnerability exists in Online Marriage Registration System version 1.0, which originates from a cross-site scripting XSS vulnerability in the parameter fromdate in file...

Online Marriage Registration System 跨站脚本漏洞

Online Marriage Registration System is a website builder that supports online marriage registration. A cross-site scripting vulnerability exists in Online Marriage Registration System version 1.0, which stems from a cross-site scripting XSS vulnerability in the searchdata parameter of file...

CVE-2024-2767

A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be initiated...

CVE-2024-25167

Cross Site Scripting vulnerability in eblog v1.0 allows a remote attacker to execute arbitrary code via a crafted script to the argument description parameter when submitting a comment on a post...

CVE-2024-1202

Authentication Bypass by Primary Weakness vulnerability in XPodas Octopod allows Authentication Bypass. This issue affects Octopod: before v1. NOTE: The vendor was contacted and it was learned that the product is not supported...

CVE-2023-49984

A cross-site scripting XSS vulnerability in the component /management/settings of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter...

CVE-2023-49981

A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization...

CVE-2023-49978

Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators...

CVE-2023-49980

A directory listing vulnerability in Best Student Result Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization...

CVE-2023-49978

Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators...

eblog 安全漏洞

eblog is a MarkerHub project based on Springboot2.1.2 development of a blog learning project . A security vulnerability exists in eblog v1.0, which stems from a cross-site scripting XSS vulnerability in the argument description parameter...