GPAC 输入验证错误漏洞

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering.The MPEG-4 decoding feature of GPAC Project on Advanced Content library 1.0.1 suffers from an integer...

CVE-2021-25204

Cross-site scripting XSS vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject arbitrary web script or HTM via the subject field to feedbackprocess.php...

CVE-2021-26229

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to editstud.php...

WayangCMS SQL注入漏洞

WayangCMS is a software application. A website CMS. Wayang-CMS suffers from an SQL injection vulnerability that originates from an SQL injection vulnerability in wycontrolls/wysidevisitor.php in Wayang-CMS v1.0. An attacker can exploit this vulnerability to obtain sensitive database information...

PT-2021-17865 · Unknown · Teachers Record Management System

Name of the Vulnerable Software and Affected Versions: Teachers Record Management System version 1.0 Description: A stored cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the email parameter in the "adminprofile.php" endpoint. This could...

files_antivirus 代码问题漏洞

filesantivirus is a ClamAV-based ownCloud antivirus application. A security vulnerability exists in filesantivirus, which allows remote attackers to exploit the vulnerability to compromise a target system. The affected products and versions are as follows:files antivirus:Prior to 1.0.0...

CVE-2021-33470

COVID19 Testing Management System 1.0 is vulnerable to SQL Injection via the admin panel...

CVE-2021-20725

Reflected cross-site scripting vulnerability in the admin page of Calendar01 free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors...

PHPGurukul Online Book Store SQL注入漏洞

PHPGurukul Online Book Store is a PHP-based online bookstore website system. A SQL injection vulnerability exists in Online Book Store v1.0, which can be exploited by attackers to execute arbitrary code...

CVE-2021-27130

Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a reverse shell upload...

Amazon Wireless-N WiFi Repeater 跨站脚本漏洞

Amazon Wireless-N WiFi Repeater is a Singapore Amazon open source wireless WIFI. provides an Internet access feature. A security vulnerability exists in Wireless-N WiFi Repeater REV 1.0 28.08.06.1, which can be exploited by an attacker to steal LAN credentials without connecting to the device...

CVE-2020-35752

Baby Care System 1.0 is affected by a cross-site scripting XSS vulnerability in the Edit Page tab through the Post title parameter...

Stored XSS vulnerability in artifact-repository-parameter

artifact-repository-parameter 1.0.0 and earlier does not escape parameter names and descriptions. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. artifact-repository-parameter 1.0.1 escapes parameter names and descriptions...

PHPGurukul Online Book Store SQL注入漏洞

Online BookStore is an online bookstore program. There is a sql injection vulnerability in Online Book Store v1.0. The vulnerability is caused by the id parameter in detail.php not filtering special characters, and an attacker can execute arbitrary SQL statements through this vulnerability...

CVE-2021-20407

IBM Security Verify Information Queue 1.0.6 and 1.0.7 discloses sensitive information in source code that could be used in further attacks against the system. IBM X-Force ID: 196185...

CVE-2021-3294

CASAP Automated Enrollment System 1.0 is affected by cross-site scripting XSS in users.php. An attacker can steal a cookie to perform user redirection to a malicious website...

Sourcecodester Alumni Management System SQL Injection Vulnerability

Sourcecodester Alumni Management System is a Php, Mysql based alumni management system from Sourcecodester, Inc. in the United States. Sourcecodester Alumni Management System version 1.0 suffers from a SQL injection vulnerability, SQL injection was originally discovered by Ankita Pal in October...

Egavilan Media Expense Management System Cross-Site Scripting Vulnerability

Egavilan Media Expense Management System is a Php-based management system for logging overhead from Egavilan Media, USA. A cross-site scripting vulnerability exists in the EGavilan Media Expense Management System version 1.0, which can be exploited to permanently store malicious JavaScript code i...

CVE-2020-35463

Version 1.0.0 of the Instana Dynamic APM Docker image contains a blank password for the root user. Systems deployed using affected versions of the Instana Dynamic APM container may allow a remote attacker to achieve root access with a blank password...

SourceCodester Online Bus Booking System SQL Injection Vulnerability

SourceCodester Online Bus Booking System is an online bus booking system by an individual developer. The system helps bus companies manage the booking and ticketing process. A SQL injection vulnerability exists in Online Bus Booking System Project Using PHP/MySQL version 1.0, which can be exploit...