Bug Finder Foody Friend 代码问题漏洞

Bug Finder Foody Friend is a SAAS-based web application ordering bot from Bug Finder, Inc. A code issue vulnerability exists in Bug Finder Foody Friend version 1.0, which stems from the parameter profilepicture in the file /user/profile that causes unrestricted uploads...

Bug Finder ChainCity Real Estate Investment Platform 跨站脚本漏洞

Bug Finder ChainCity Real Estate Investment Platform is a real estate investment platform from Bug Finder, Inc. A cross-site scripting vulnerability exists in version 1.0 of the ChainCity Real Estate Investment Platform, which stems from the cross-site scripting caused by the parameter subject in...

PT-2023-25750 · Unknown · Campcodes Beauty Salon Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the category argument in an unknown function of the file add-product.php. This can ...

Campcodes Beauty Salon Management System SQL注入漏洞

Campcodes Beauty Salon Management System is a beauty salon management system from Campcodes. A SQL injection vulnerability exists in Campcodes Beauty Salon Management System version 1.0, which stems from a SQL injection vulnerability in the parameter category...

PT-2023-25724 · Unknown · Nesote Inout Search Engine Ai Edition

Name of the Vulnerable Software and Affected Versions: Nesote Inout Search Engine AI Edition version 1.1 Description: A problematic issue has been found in the software, affecting an unknown part of the file /index.php. The manipulation of the page argument leads to cross-site scripting. It is...

PT-2023-25711 · Unknown · Nesote Inout Blockchain Easypayments

Name of the Vulnerable Software and Affected Versions: Nesote Inout Blockchain EasyPayments version 1.0 Description: A critical issue was found in the POST Parameter Handler component of the /index.php/payment/getcoinaddress file. The manipulation of the coinid argument leads to sql injection,...

Lost and Found Information System SQL注入漏洞

Lost and Found Information System is a lost and found information system by the individual developer of oretnom23. A SQL injection vulnerability exists in Lost and Found Information System version 1.0, which originates from the parameter id of the file /classes/Master.php?f=saveitem that can lead...

PT-2023-25694 · Sourcecodester · Ac Repair/Services System

Name of the Vulnerable Software and Affected Versions: SourceCodester AC Repair and Services System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /classes/Master.php?f=delete inquiry of the component HTTP POST Request Handle...

CVE-2023-37745

A cross-site scripting XSS vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Description of the /admin/aboutus.php component...

CVE-2023-37743

A cross-site scripting XSS vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box...

CVE-2023-37743

A cross-site scripting XSS vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box...

CVE-2023-37562

Cross-site request forgery CSRF vulnerability in exists in WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier. If a user views a malicious page while logged in, unintended operations may be performed...

Maid Hiring Management System 跨站脚本漏洞

PHPGurukul Maid Hiring Management System is a maid hiring management system from PHPGurukul, USA. A security vulnerability exists in Maid Hiring Management System v1.0, which originates from the component /admin/search-booking-request.php containing a cross-site scripting XSS vulnerability...

Maid Hiring Management System 跨站脚本漏洞

PHPGurukul Maid Hiring Management System is a maid hiring management system from PHPGurukul, Inc. A security vulnerability exists in Maid Hiring Management System v1.0, which stems from a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary web script or HTML by...

Task Reminder System 跨站脚本漏洞

Task Reminder System is a task reminder system by Carlo Montero Personal Developer. A security vulnerability exists in version 1.0 of the Sourcecodester Task Reminder System, which stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability that could allow an authenticated use...

CVE-2023-2561

The Gallery Metabox for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the galleryremove function in versions up to, and including, 1.5. This makes it possible for subscriber-level attackers to modify galleries attached to posts and pages with th...

Service Provider Management System SQL注入漏洞

Service Provider Management System is a web-based application developed by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A SQL injection vulnerability exists in SourceCodester Service Provider Management System version 1.0, whic...

Online Restaurant Management System SQL注入漏洞

Online Restaurant Management System is a Code-projects open source online restaurant management system. A security vulnerability exists in Code-projects Online Restaurant Management System version 1.0, which allows an attacker to bypass the administration panel and view order history, add product...

CVE-2023-36293

SQL injection vulnerability in wmanager v.1.0.7 and before allows a remote attacker to obtain sensitive information via a crafted script to the company.php component...

Best pos management system SQL注入漏洞

Best pos management system is a best pos management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Best POS Management System version 1.0, which stems from the parameter username in the file adminclass.php that can lead to sql injection...