108 matches found
Student Management System 跨站脚本漏洞
Student Management System is a simple web-based student management software developed by Sk. Amir Hamza, an individual developer in Bangladesh. A cross-site scripting vulnerability exists in Complete Online Student Management System version 1.0, which is caused by a cross-site scripting...
Student Management System 跨站脚本漏洞
Student Management System is a simple web-based student management software developed by Sk. Amir Hamza, an individual developer in Bangladesh. A cross-site scripting vulnerability exists in Complete Online Student Management System version 1.0, which originates from a cross-site scripting...
CVE-2024-3523
A vulnerability classified as critical was found in Campcodes Online Event Management System 1.0. This vulnerability affects unknown code of the file /views/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...
PT-2024-26431 · Campcodes · Campcodes Complete Online Student Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Complete Online Student Management System version 1.0 Description: A problematic vulnerability has been found in the attendance view.php file, where the manipulation of the FirstRecord argument leads to cross-site scripting. This...
PT-2024-26437 · Campcodes · Campcodes Complete Online Student Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Complete Online Student Management System version 1.0 Description: A problematic vulnerability was found in the Campcodes Complete Online Student Management System, affecting an unknown functionality of the file academic year...
PT-2024-26427 · Unknown · Campcodes Complete Online Student Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Complete Online Student Management System version 1.0 Description: A vulnerability was found in the processing of the file courses view.php, where the manipulation of the argument FirstRecord leads to cross-site scripting. The attac...
PT-2024-25137 · Sourcecodester · Sourcecodester Computer Laboratory Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Laboratory Management System version 1.0 Description: A critical issue has been found in the SourceCodester Computer Laboratory Management System, affecting an unknown functionality of the file /admin/category/view...
CVE-2023-5270
A vulnerability was found in SourceCodester Best Courier Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file viewparcel.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to th...
mooSocial mooDating 跨站脚本漏洞
mooSocial mooDating is a dating application from mooSocial. A cross-site scripting vulnerability exists in mooSocial mooDating version 1.2, which stems from a cross-site scripting XSS vulnerability in the file /users/view...
PT-2023-23215 · Sourcecodester · Sourcecodester Service Provider Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Service Provider Management System version 1.0 Description: A critical issue has been found in the SourceCodester Service Provider Management System, affecting some unknown functionality of the file view.php. The manipulation o...
PT-2023-2942 · Sourcecodester · Sourcecodester Ac Repair/Services System
Name of the Vulnerable Software and Affected Versions: SourceCodester AC Repair and Services System version 1.0 Description: A critical issue has been found in the system, affecting the /admin/bookings/view booking.php file. The manipulation of the id argument leads to SQL injection. This can be...
PT-2023-19392 · Sourcecodester · Ac Repair/Services System
Name of the Vulnerable Software and Affected Versions: SourceCodester AC Repair and Services System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file services/view.php. The manipulation of the id argument leads to sql injectio...
PT-2023-18236 · Campcodes · Campcodes Online Thesis Archiving System
Name of the Vulnerable Software and Affected Versions: Campcodes Online Thesis Archiving System version 1.0 Description: A critical issue has been found in the system, affecting the /admin/curriculum/view curriculum.php file. The manipulation of the id argument leads to SQL injection, allowing fo...
SUSE CVE-2010-3447
Cross-site scripting XSS vulnerability in view.php in the file viewer in Horde Gollem before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the file parameter in a viewfile action...
PT-2023-18766 · Unknown · Librephotos
Name of the Vulnerable Software and Affected Versions: LibrePhotos versions prior to e19e539 Description: The issue is related to incorrect access control in the api/views/user.py file. This could potentially allow unauthorized access to certain features or data. Recommendations: For versions pri...
PT-2022-7106 · Ibm · Ibm Navigator For I
Name of the Vulnerable Software and Affected Versions: IBM Navigator for i versions 7.3 through 7.5 Description: The issue is related to the lack of protection for the SQL query structure in the IBM Navigator graphical interface of the IBM i operating system. This could allow a remote attacker to...
IBM Navigator for i SQL注入漏洞
IBM Navigator for i is a console interface used in IBMi by International Business Machines IBM to perform and manage critical tasks in IBMi. IBM Navigator for i is vulnerable to SQL injection in versions 7.3, 7.4, and 7.5. The vulnerability stems from the application's lack of validation of...
FluxCP 跨站脚本漏洞
FluxCP is rAthena open source a web-based control panel . Used for rAntha server written in PHP. A security vulnerability exists in a previous version of rAthena FluxCP, which stems from an unknown function in the file themes/default/servicedesk/view.php of the component Service Desk Image URL...
Moddable SDK 缓冲区错误漏洞
Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, Inc. in the United States. A security vulnerability exists in the Moddable SDK that originates from an out-of-bounds read security issue in the fxUint8Getter function in...
WordPress 安全漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. SQL injection vulnerability exists in the WordPress plugin Fancy Product Designer 4.7.4 and earlier,...