6116 matches found
PT-2022-27637 · Sens · Sens
Name of the Vulnerable Software and Affected Versions: SENS version 1.0 Description: The issue is related to Cross Site Scripting XSS via the com.liuyanzhao.sens.web.controller.admin controller, specifically the getRegister function. This allows for potential malicious script execution...
Dynamic Transaction Queuing System 代码问题漏洞
Dynamic Transaction Queuing System is a dynamic transaction queuing system using PHP/MySQL by Carlo Montero, an individual developer. A security vulnerability exists in Dynamic Transaction Queuing System v1.0, which originates from an arbitrary file upload vulnerability in...
PT-2022-27636 · Sens · Sens
Name of the Vulnerable Software and Affected Versions: SENS version 1.0 Description: The issue is related to Cross Site Scripting XSS. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...
CVE-2022-45009
Online Leave Management System v1.0 was discovered to contain an arbitrary file upload vulnerability at /leavesystem/classes/SystemSettings.php?f=updatesettings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...
PT-2022-27366 · Unknown · Simple Phone Book/Directory Web App
Name of the Vulnerable Software and Affected Versions: Simple Phone Book/Directory Web App version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the editid parameter at the "/PhoneBook/edit.php" API endpoint. Recommendations: For...
Online Leave Management System 代码问题漏洞
Sourcecodester Online Leave Management System is an online leave management system. A security vulnerability exists in Online Leave Management System v1.0, which originates from a file upload vulnerability found in /leavesystem/classes/SystemSettings.php?f=updatesettings. An attacker could exploi...
Veeam Backup for Google Cloud 授权问题漏洞
Veeam Backup for Google Cloud is a data backup software from Veeam USA. A security vulnerability exists in Veeam Backup for Google Cloud versions v1.0 and v3.0, which stems from a vulnerability that allows attackers to bypass the authentication mechanism...
Ecommerce-Website 跨站脚本漏洞
Ecommerce-Website is complete e-commerce website with administration panel built using PHP and MySql. A security vulnerability exists in Ecommerce-Website v1.0, which originates from the presence of cross-site scripting XSS in the component /signupscript.php, allowing attackers to execute arbitra...
Human Resource Management System 跨站脚本漏洞
Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Human Resource Management System version 1.0, which stems from a problem with an unknown function in the file /hrm/employeeview.php, where manipulation of...
DIVOTECH Dot Tech Smart Campus System 安全漏洞
DIVOTECH Dot Tech Smart Campus System is a smart campus system from China-based DIVOTECH. A security vulnerability exists in version 1.0 of the DIVOTECH Dot Tech Smart Campus System, which stems from a problem with an unknown function in the file /services/Card/findUser, which could lead to...
Human Resource Management System 代码问题漏洞
Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Human Resource Management System version 1.0 due to some unknown handling of the file /hrm/controller/employee.php in the component Content-Type Handler,...
CVE-2022-44347
Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=inquiries/viewinquiry&id=...
Tenda AC6 安全漏洞
Tenda AC6 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC6 version V1.0 V15.03.05.19, which originates from a buffer overflow vulnerability contained in the firewallEn parameter in the formSetFirewallCfg function...
Sanitization Management System SQL注入漏洞
Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Sanitization Management System v1.0. An attacker can exploit this vulnerability to perform a SQL injection attack via...
CVE-2022-44211
In GL.iNet Goodcloud 1.1 Incorrect access control allows a remote attacker to access/change devices' settings...
PT-2022-27142 · Gl.Inet · Gl.Inet Goodcloud
Name of the Vulnerable Software and Affected Versions: GL.iNet Goodcloud version 1.1 Description: The issue allows a remote attacker to access or change devices' settings due to incorrect access control. Recommendations: For GL.iNet Goodcloud version 1.1, update to a newer version that addresses...
GL.iNet GoodCloud 安全漏洞
GL.iNet GoodCloud is an IoT device management system from China's Guanglian Zhitong GL.iNet. A security vulnerability exists in GL.iNet GoodCloud version 1.0. An attacker can access the device's management panel by exploiting the vulnerability...
Tenda AC6 缓冲区错误漏洞
Tenda AC6 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC6V1.0 version V15.03.05.19, which originates from vulnerability to buffer overflow that can lead to denial of service...