WordPress Plugin Nooz 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Simple and Nice Shopping Cart Script 代码问题漏洞

Simple and Nice Shopping Cart Script is simple and nice PHP shopping cart script. A vulnerability exists in SourceCodester Simple and Nice Shopping Cart Script version 1.0, which stems from a problem with the file uploaderm.php, where the operation of the parameter submit results in unrestricted...

PT-2023-17022 · Sourcecodester · Sourcecodester Young Entrepreneur E-Negosyo System

Name of the Vulnerable Software and Affected Versions: SourceCodester Young Entrepreneur E-Negosyo System version 1.0 Description: A problematic vulnerability has been found in the GET Parameter Handler component of the file /bsenordering/index.php. The manipulation of the category argument with...

PT-2023-17002 · Sourcecodester · Sourcecodester Medicine Tracker System

Name of the Vulnerable Software and Affected Versions: SourceCodester Medicine Tracker System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file Users.php?f=save user. The manipulation of the arguments firstname, middlename, lastname, username...

PT-2023-16984 · Sourcecodester · Sourcecodester Automatic Question Paper Generator System

Name of the Vulnerable Software and Affected Versions: SourceCodester Automatic Question Paper Generator System version 1.0 Description: A critical issue was found in the GET Parameter Handler component of the users/user/manage user.php file. The manipulation of the id argument leads to SQL...

PT-2023-17006 · Sourcecodester · Sourcecodester Student Study Center Desk Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Study Center Desk Management System version 1.0 Description: A critical vulnerability was found in the Report Handler component of the system. The issue affects an unknown functionality of the file...

CVE-2023-27041

School Registration and Fee System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at/bilal final/edituser.php...

Simple Image Gallery 注入漏洞

Simple Image Gallery Web App is a web-based application that can be managed by multiple users. Users can store their images in this web application. A security vulnerability exists in Simple Image Gallery v1.0 that stems from a Remote Code Execution RCE vulnerability...

CVE-2023-24728

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function...

CVE-2023-24726

Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on the enquiry page...

Simple Customer Relationship Management SQL注入漏洞

Simple Customer Relationship Management Simple CRM is a simple customer relationship management system by Carlo Montero, a personal developer. A security vulnerability exists in Simple Customer Relationship Management System v1.0, which originates from a SQL injection vulnerability in the contact...

Simple Customer Relationship Management SQL注入漏洞

Simple Customer Relationship Management Simple CRM is a simple customer relationship management system by Carlo Montero Personal Developer. A security vulnerability exists in Simple Customer Relationship Management System v1.0, which originates from a SQL injection vulnerability in the address...

CVE-2023-27781

jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c...

CVE-2023-24729

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the address parameter in the user profile update function...

JPEGOPTIM 缓冲区错误漏洞

JPEGOPTIM is a utility for optimizing/compressing JPEG files by Timo Kokkonen, a US-based individual developer. A security vulnerability exists in JPEGOPTIM v1.5.2, which stems from the discovery of a contained heap overflow via the optimize function of jpegoptim.c. The vulnerability is caused by...

PT-2023-16943 · Sourcecodester · Sourcecodester Friendly Island Pizza Website/Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Friendly Island Pizza Website and Ordering System version 1.0 Description: A critical issue affects the processing of the file addmem.php of the component POST Parameter Handler. The manipulation of the firstname argument leads...

CVE-2023-27073

A Cross-Site Request Forgery CSRF in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request...

Yoga Class Registration System 跨站脚本漏洞

Yoga Class Registration System is a yoga class registration system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in version 1.0 of the SourceCodester Yoga Class Registration System, which stems from cross-site scripting due to misuse of the parameter name...

PT-2023-20934 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: A Cross-Site Request Forgery CSRF issue allows attackers to change user details and credentials via a crafted POST request. Recommendations: For Online Food Ordering System version 1.0,...

PT-2023-16950 · Unknown · Sourcecodester Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Pizza Ordering System version 1.0 Description: A critical issue has been found, affecting the save menu function, which leads to unrestricted upload. The attack can be launched remotely. Recommendations: For SourceCodest...