6115 matches found
Prison Management System SQL注入漏洞
Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/inmates/managerecord. php in the id parameter lack of SQL data filter escaping, an attack...
Prison Management System SQL注入漏洞
Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/actions/manageaction. php in the id parameter lack of SQL data filter escaping, an attack...
Prison Management System SQL注入漏洞
Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/actions/viewaction.php The vulnerability is caused by the lack of SQL data filter escapin...
Prison Management System SQL注入漏洞
Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/inmates/manageinmate. php in the id parameter lack of SQL data filter escaping, an attack...
CVE-2022-34203
A cross-site request forgery CSRF vulnerability in Jenkins EasyQA Plugin 1.0 and earlier allows attackers to connect to an attacker-specified HTTP server...
Simple Bakery Shop Management 跨站脚本漏洞
Simple Bakery Shop Management is a bakery store management system. A security vulnerability exists in Simple Bakery Shop Management System v1.0, which originates from multiple cross-site scripting XSS vulnerabilities in /bsms/?page=manageaccount. An attacker can exploit this vulnerability to...
kernel: cgroups v1 release_agent feature may allow privilege escalation
A vulnerability was found in the Linux kernel’s cgroupreleaseagentwrite in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 releaseagent feature to escalate privileges and bypass the namespace isolation unexpectedly...
CVE-2021-40510
XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...
OBDA systems Mastro 代码问题漏洞
OBDA systems Mastro is a Java tool for ontology-based data access OBDA from OBDA systems, Italy. A code issue vulnerability exists in OBDA systems Mastro version 1.0. An attacker could use this vulnerability to read system files via a custom DTD...
Online Railway Reservation system SQL注入漏洞
Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or potential passengers to browse their schedules and reserve seats. sourceCodester Online Railway Reservation System v1.0 is vulnerable to a SQL...
CVE-2022-31383
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php...
CVE-2022-31382
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.php...
CVE-2021-41421
A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker to gain RCE through the MaianAffiliate admin panel...
CVE-2022-31912
Online Tutor Portal Site v1.0 is vulnerable to SQL Injection via /otps/classes/Master.php?f=deleteteam...
CVE-2022-31906
Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting XSS via /ofrs/classes/Master.php...
MaianAffiliate 代码问题漏洞
MaianAffiliate is a free, simple but powerful php referral system written in PHP. a security vulnerability exists in MaianAffiliate v.1.0, which stems from the existence of a PHP code injection issue. An authenticated attacker can exploit this vulnerability to obtain RCE through the MaianAffiliat...
Online Discussion Forum Site SQL注入漏洞
Sourcecodester Online Discussion Forum Site is an application of Sourcecodester, an online discussion forum. A SQL injection vulnerability exists in Sourcecodester Online Discussion Forum Site v1.0, which originates from /odfs/classes/Master.php?f=deleteteam missing filter escaping for SQL data. ...
Directory Management System SQL注入漏洞
Directory Management System is a directory management system by Anuj Kumar, a personal developer. A security vulnerability exists in Directory Management System v1.0, which can be exploited to perform an SQL injection attack via the editid parameter in view-directory.php...