SourceCodester Task Reminder System SQL Injection Vulnerability

Task Reminder System is a task reminder system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Task Reminder System version 1.0, which stems from a problem with the file /admin/?page=reminders/viewreminder, where manipulation of the parameter id can lea...

PT-2023-18206 · Unknown · Campcodes Online Thesis Archiving System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Thesis Archiving System version 1.0 Description: A critical issue affects the processing of the file /admin/departments/view department.php, where the manipulation of the id argument leads to sql injection. The attack can be...

CVE-2022-44726

The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...

Design/Logic Flaw

The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...

CVE-2022-44726

The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...

CVE-2022-44726

The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...

CVE-2022-44726

CVE-2022-44726 affects TouchDown Timesheet tracking component for Jira (version 4.1.4). The calendar view is vulnerable to stored XSS, enabling script execution in the context of affected pages. Public details in connected sources corroborate a calendar-view XSS risk; no concrete exploit details ...

CVE-2022-44726: Improper Neutralization of Input During Web Page Generation

The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view...

PT-2023-14539 · Unknown · Touchdown Timesheet Tracking Component For Jira

Name of the Vulnerable Software and Affected Versions: TouchDown Timesheet tracking component for Jira version 4.1.4 Description: The issue allows for XSS in the calendar view. Recommendations: For version 4.1.4, update to a version that fixes the XSS issue in the calendar view, as the current...

TouchDown Timesheet Tracking for Jira: Cross-site Scripting Vulnerabilities

TouchDown Timesheet Tracking for Jira is an easy-to-use timesheet reporting component from TouchDown, Switzerland. A security vulnerability exists in TouchDown Timesheet Tracking for Jira version 4.1.4, which stems from a stored cross-site scripting XSS vulnerability in the calendar view...

Dell PowerPath Management Appliance Information Disclosure Vulnerability

Dell PowerPath Management Appliance is a PowerPath host management application from Dell USA that offers two models: a virtual machine-based appliance and a Docker containerized appliance. The Dell PowerPath Management Appliance is vulnerable to a sensitive information disclosure vulnerability th...

XWiki Commons: Code Injection Vulnerabilities

XWiki Commons is a technology library shared by several other top XWiki projects. A security vulnerability exists in XWiki Commons, which arises from the fact that any user with view rights to normally accessible documents can execute arbitrary Groovy, Python, or Velocity code in XWiki to gain fu...

Code injection

XWiki Commons are technical libraries common to several other top level XWiki projects. Rights added to a document are not taken into account for viewing it once it's deleted. Note that this vulnerability only impact deleted documents that where containing view rights: the view rights provided on...

CVE-2023-29208

XWiki Commons are technical libraries common to several other top level XWiki projects. Rights added to a document are not taken into account for viewing it once it's deleted. Note that this vulnerability only impact deleted documents that where containing view rights: the view rights provided on...

CVE-2023-29208 Data leak through deleted documents

XWiki Commons are technical libraries common to several other top level XWiki projects. Rights added to a document are not taken into account for viewing it once it's deleted. Note that this vulnerability only impact deleted documents that where containing view rights: the view rights provided on...

CVE-2023-29208 Data leak through deleted documents

XWiki Commons are technical libraries common to several other top level XWiki projects. Rights added to a document are not taken into account for viewing it once it's deleted. Note that this vulnerability only impact deleted documents that where containing view rights: the view rights provided on...

CVE-2023-2092

A vulnerability, which was classified as critical, has been found in SourceCodester Vehicle Service Management System 1.0. Affected by this issue is some unknown functionality of the file viewservice.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

CVE-2023-29208: Exposure of Resource to Wrong Sphere

XWiki Commons are technical libraries common to several other top level XWiki projects. Rights added to a document are not taken into account for viewing it once it's deleted. Note that this vulnerability only impact deleted documents that where containing view rights: the view rights provided on...

PT-2023-17710 · Sourcecodester · Sourcecodester Vehicle Service Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Vehicle Service Management System version 1.0 Description: A critical issue has been found in the SourceCodester Vehicle Service Management System, affecting some unknown functionality of the file view service.php. The...

Sourcecodester Vehicle Service Management System SQL Injection Vulnerability

Sourcecodester Vehicle Service Management System is an open source PHP project. It is a simple web application for automotive repair/service stores or businesses. SourceCodester Vehicle Service Management System version 1.0 suffers from a SQL injection vulnerability, which originates from the...