ELECOM WRC 代码注入漏洞

The ELECOM WRC is a home-applicable network camera from ELECOM Japan. A code injection vulnerability exists in ELECOM WRC-1167FEBK-A v1.18 and earlier versions, which stems from the presence of a code injection that allows network-adjacent authenticated attackers to execute arbitrary operating...

Online Pizza Ordering System 跨站脚本漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A security vulnerability exists in Sourcecodester Online Pizza Ordering System v1.0, which originates from a cross-site scripting XSS vulnerability in file index.php...

Online Security Guards Hiring System 跨站脚本漏洞

Online Security Guards Hiring System is an online security guard hiring system. A security vulnerability exists in Online Security Guards Hiring System version 1.0, which can be exploited to execute arbitrary code via a search booking box...

PT-2023-25417 · Unknown · Phpgurukul Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Shopping Portal version 1.0 Description: A critical issue has been found in the Registration Page component of the affected software, leading to improper restriction of excessive authentication attempts. This can be exploite...

PT-2023-25234 · Gz Scripts · Gz Multi Hotel Booking System

Name of the Vulnerable Software and Affected Versions: GZ Scripts GZ Multi Hotel Booking System version 1.8 Description: A vulnerability was found in the GZ Multi Hotel Booking System. It has been classified as problematic. The issue affects an unknown function of the file /index.php. The...

ThinuTech ThinuCMS 跨站脚本漏洞

ThinuTech ThinuCMS is a fast and secure PHP blogging system from ThinuTech. A cross-site scripting vulnerability exists in ThinuTech ThinuCMS version 1.5, which stems from the parameter name/body in the file /contact.php that causes cross-site scripting...

Project Worlds Online Examination System 跨站请求伪造漏洞

Project Worlds Online Examination System is an online examination system Project Worlds Online Examination System version 1.0 suffers from a cross-site request forgery vulnerability that originates from an attacker being able to craft a malicious link that, when clicked by an administrator user,...

CVE-2023-37136

A stored cross-site scripting XSS vulnerability in the Basic Website Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-36968

A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter...

ChatEngine 跨站脚本漏洞

ChatEngine is a Java web application by the individual developer Winnie Liang. A security vulnerability exists in ChatEngine v.1.0, which is caused by a cross-site scripting XSS vulnerability in the username field...

SAMSUNG Mobile devices 输入验证错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR Jul-2023 Release 1 version, which stems from an incorrect input validation vulnerability in the DataProfile...

ThinuTech ThinuCMS SQL注入漏洞

ThinuTech ThinuCMS is a fast and secure PHP blogging system from ThinuTech. A SQL injection vulnerability exists in ThinuTech ThinuCMS version 1.5, which stems from the parameter catid in the file /category.php that can lead to sql injection...

SmartWeb Infotech Job Board 代码问题漏洞

Smartweb Infotech SmartWeb Infotech Job Board is a web solution from Smartweb Infotech. A code issue vulnerability exists in SmartWeb Infotech Job Board version 1.0, which stems from the parameter filename in the file /settings/account that can lead to unrestricted uploads...

PT-2023-7544 · Asus · Asus Armoury Crate +1

Name of the Vulnerable Software and Affected Versions: Asus Armoury Crate version 5.3.4.0 SetupAsusServices version 1.0.5.1 Description: The issue is related to an unquoted service path vulnerability in the SetupAsusServices module of Asus Armoury Crate. This vulnerability allows local users to...

CVE-2023-31222

Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing data to be deleted, stolen, or...

CVE-2023-34735

Property Cloud Platform Management Center 1.0 is vulnerable to error-based SQL injection...

CVE-2023-34648

A Cross Site Scripting vulnerability in PHPgurukl User Registration Login and User Management System with admin panel v.1.0 allows a local attacker to execute arbitrary code via a crafted script to the signup.php...

PHPgurukl User Registration Login and User Management System 跨站脚本漏洞

User Registration & Login and User Management System is a user management system with administration panel. A security vulnerability exists in PHPgurukl User Registration Login and User Management System version v.1.0, which stems from a cross-site scripting XSS vulnerability...

Hotel Management System SQL注入漏洞

Hotel Management System is a hotel management system based MIS project by Prem Chand Saini, an individual developer in India. A security vulnerability exists in Online Hotel Management System Project v1.0.0, which originates from a SQL injection vulnerability in the login password entry box...

DOOR Property Cloud Platform Management Center SQL注入漏洞

DOOR Property Cloud Platform Management Center is a property cloud platform management center of China DOOR Corporation. A security vulnerability exists in DOOR Property Cloud Platform Management Center version 1.0, which originates from an SQL injection vulnerability...