6115 matches found
CVE-2022-29318
An arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
CVE-2022-29655
An arbitrary file upload vulnerability in the Upload Photos module of Wedding Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...
Home Owners Collection Management 跨站脚本漏洞
Fairway Independent Mortgage Home Owners Collection Management is a home purchase loan system from Fairway Independent Mortgage. home owners collection management v1 version contains a cross-site scripting vulnerability, which stems from a lack of data validation filtering of user-supplied data a...
Home Owners Collection Management 跨站脚本漏洞
Fairway Independent Mortgage Home Owners Collection Management is a home purchase loan system from Fairway Independent Mortgage. home owners collection management v1 version contains a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied data and...
PT-2022-19361 · Unknown · Dairy Farm Shop Management System
Name of the Vulnerable Software and Affected Versions: Dairy Farm Shop Management System version 1.0 Description: The issue concerns multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel, allowing attackers to bypass authentication. Recommendations: Fo...
CVE-2022-29328
D-Link DAP-1330OSS-firmware1.00b21 was discovered to contain a stack overflow via the function checkvalidupgrade...
CVE-2022-27412
Explore CMS v1.0 was discovered to contain a SQL injection vulnerability via a /page.php?id= request...
CVE-2022-28971
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function fromSetIpMacBind. This vulnerability allows attackers to cause a Denial of Service DoS...
CVE-2022-28533
Sourcecodester Medical Hub Directory Site 1.0 is vulnerable to SQL Injection via /mhds/clinic/viewdetails.php...
CVE-2022-28080
Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter...
CVE-2022-28080
Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter...
Royal Event Management System SQL注入漏洞
Royal Event Management System is an event management system. version v1.0 of Royal Event Management System is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the todate parameter. An attacker could use this vulnerability to execute illegal...
CVE-2022-28099
Poultry Farm Management System v1.0 was discovered to contain a SQL injection vulnerability via the Item parameter at /farm/store.php...
Hospital Management System SQL注入漏洞
Hospital Management System HMS is a computer system that helps manage health care-related information and helps health care providers do their jobs efficiently. v1.0 of Hospital Management System is vulnerable to SQL injection, which can be exploited by attackers via the patientsearch.php with th...
CVE-2022-27330
A cross-site scripting XSS vulnerability in /public/admin/index.php?addproduct of E-Commerce Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Title text field...
CVE-2022-28480
ALLMediaServer 1.6 is vulnerable to Buffer Overflow via MediaServer.exe...
Red Planet Laundry Management System SQL注入漏洞
Red Planet Laundry Management System is an application management system. A security vulnerability exists in Red Planet Laundry Management System version 1.0 that stems from vulnerability to SQL injection attacks...
PT-2022-18810 · Unknown · Php Mysql Admin Panel Generator
Name of the Vulnerable Software and Affected Versions: PHP MySQL Admin Panel Generator version 1 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected at the "/edit-db.php" API endpoint. This enables attackers to...