AZL-27830 CVE-2023-38697 affecting package rubygem-protocol-http1 for versions less than 0.15.1-1

protocol-http1 provides a low-level implementation of the HTTP/1 protocol. RFC 9112 Section 7.1 defined the format of chunk size, chunk data and chunk extension. The value of Content-Length header should be a string of 0-9 digits, the chunk size should be a string of hex digits and should split...

Toll Tax Management System Cross-Site Scripting Vulnerability

Toll Tax Management System is a toll tax management system developed by Carlo Montero, an individual developer. A security vulnerability exists in Toll Tax Management System version 1.0, which can be exploited to run arbitrary code via the First Name and Last Name fields on the My Account page...

PT-2023-27793 · Phpjabbers · Phpjabbers Bus Reservation System

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Bus Reservation System version 1.1 Description: A vulnerability was found in the PHP Jabbers Bus Reservation System, affecting some unknown functionality of the file /index.php. The manipulation of the pickup id argument in the...

PT-2023-27814 · Unknown · Php Jabbers Service Booking Script

Name of the Vulnerable Software and Affected Versions: PHP Jabbers Service Booking Script version 1.0 Description: A vulnerability was found in the PHP Jabbers Service Booking Script, affecting unknown code of the file /index.php. The manipulation of the index argument leads to cross-site...

Cleaning Business Software 跨站脚本漏洞

Cleaning Business Software is PHPJabbers open source a cleaning business software. Cleaning Business Software v1.0 version of the existence of cross-site scripting vulnerabilities , the vulnerability stems from the file / index.php parameter index of the user-supplied data lack of effective...

Class Scheduling System Data Forgery Problem Vulnerability

Class Scheduling System is a class scheduling system by jkev Personal Developer. A security vulnerability exists in Class Scheduling System version 1.0, which stems from a lack of authentication when changing email addresses or passwords, allowing a remote attacker to take over an account...

Faculty Evaulation System Cross-Site Scripting Vulnerability

Faculty Evaulation System is a faculty grading system. A security vulnerability exists in Faculty Evaulation System version v.1.0, which originated from a vulnerability that allows an attacker to execute arbitrary code with a crafted payload via the page parameter...

CVE-2023-37647

SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /AntSuxin.php...

Fuge CMS 输入验证错误漏洞

Fuge CMS is a CMS project by Fuge Individual Developers. A security vulnerability exists in Fuge CMS version 1.0, which stems from an open redirection vulnerability in /front/ProcessAct.java...

PT-2023-27126 · Unknown · Phpscriptpoint Recipepoint

Name of the Vulnerable Software and Affected Versions: phpscriptpoint RecipePoint version 1.9 Description: A critical issue was found in phpscriptpoint RecipePoint, affecting an unknown part of the file /recipe-result. The manipulation of the argument text/category/type/difficulty/cuisine/cooking...

Rail Pass Management System SQL注入漏洞

Rail Pass Management System is a pass management system. A security vulnerability exists in the Rail Pass Management System version v.1.0 that could allow a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file...

Simple Online Mens Salon Management System 跨站脚本漏洞

Simple Online Mens Salon Management System is open source a men's salon management system . Simple Online Mens Salon Management System v1.0 version of a cross-site scripting vulnerability , the vulnerability stems from the file /admin/?page=user/list parameter First Name/Last Name/Username on the...

Simple Online Mens Salon Management System SQL注入漏洞

Simple Online Mens Salon Management System is open source a men's salon management system . Simple Online Mens Salon Management System v1.0 version of the SQL injection vulnerability, the vulnerability stems from the file /admin/?page=user/manageuser &id=3 parameter id lack of validation of...

SourceCodester Simple Cafe Billing System SQL注入漏洞

Simple Cafe Billing System is a cafe billing system by Carlo Montero Personal Developer. SourceCodester Simple Cafe Billing System version 1.0 suffers from a SQL injection vulnerability that originates from a parameter id in the file index.php that can lead to sql injection...

Availability Booking Calendar PHP 跨站脚本漏洞

Availability Booking Calendar PHP is a GZ Scripts open source availability booking calendar system . A cross-site scripting vulnerability exists in GZ Scripts Availability Booking Calendar PHP version 1.0, which stems from the parameter img in the file /index.php?controller=GzUser&action=edit&id=...

CVE-2022-31457

RTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the endpoint /data/...

CVE-2022-31457

RTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the endpoint /data/...

CVE-2022-31458

RTX TRAP v1.0 was discovered to be vulnerable to host header poisoning...

PT-2023-26675 · Unknown · Campcodes Beauty Salon Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A problematic vulnerability has been found in the system, affecting an unknown part of the file /admin/edit-accepted-appointment.php. The manipulation of the id argument leads ...

PT-2023-26950 · Unknown · Phpscriptpoint Lawyer

Name of the Vulnerable Software and Affected Versions: phpscriptpoint Lawyer version 1.6 Description: A vulnerability was found in the file page.php, which leads to cross site scripting. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond ...