RestaurantWebsite 代码注入漏洞

RestaurantWebsite is an online food ordering and table reservation system by the individual developer Idriss JAIRI. RestaurantWebsite suffers from a code injection vulnerability that stems from the incorrect operation of the parameter selecteddate in the component Make a Reservation, which could...

CVE-2025-13796: Server-Side Request Forgery (SSRF)

A security vulnerability has been detected in deco-cx apps up to 0.120.1. Affected by this vulnerability is the function AnalyticsScript of the file website/loaders/analyticsScript.ts of the component Parameter Handler. Such manipulation of the argument url leads to server-side request forgery. T...

The vulnerabilities of the FortiOS operating systems, the FortiProxy proxy server for protecting against internet attacks, and the scalable cloud-based security system FortiSASE are related to the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerabilities of the FortiOS operating systems, the FortiProxy proxy server for protecting against internet attacks, and the scalable cloud-based security system FortiSASE are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a...

EUVD-2025-199937

A weakness has been identified in winston-dsouza Ecommerce-Website up to 87734c043269baac0b4cfe9664784462138b1b2e. Affected by this issue is some unknown functionality of the file /includes/headermenu.php of the component GET Parameter Handler. Executing manipulation of the argument Error can lea...

CVE-2025-13793

A weakness has been identified in winston-dsouza Ecommerce-Website up to 87734c043269baac0b4cfe9664784462138b1b2e. Affected by this issue is some unknown functionality of the file /includes/headermenu.php of the component GET Parameter Handler. Executing manipulation of the argument Error can lea...

CVE-2025-13793

The CVE concerns winston-dsouza Ecommerce-Website (up to build 87734c043269baac0b4cfe9664784462138b1b2e) with a weakness in the /includes/header_menu.php component, specifically in the GET Parameter Handler. Manipulating the argument Error can trigger cross-site scripting. The issue is exploitabl...

CVE-2025-13793 winston-dsouza Ecommerce-Website GET Parameter header_menu.php cross site scripting

A weakness has been identified in winston-dsouza Ecommerce-Website up to 87734c043269baac0b4cfe9664784462138b1b2e. Affected by this issue is some unknown functionality of the file /includes/headermenu.php of the component GET Parameter Handler. Executing manipulation of the argument Error can lea...

CVE-2025-13793 winston-dsouza Ecommerce-Website GET Parameter header_menu.php cross site scripting

A weakness has been identified in winston-dsouza Ecommerce-Website up to 87734c043269baac0b4cfe9664784462138b1b2e. Affected by this issue is some unknown functionality of the file /includes/headermenu.php of the component GET Parameter Handler. Executing manipulation of the argument Error can lea...

Ecommerce-Website 代码注入漏洞

Ecommerce-Website is a full-fledged e-commerce website by Winston Dsouza Individual Developer with an admin panel built using PHP and MySql. A code injection vulnerability exists in Ecommerce-Website, which stems from the incorrect operation of the parameter Error in the file...

CVE-2025-13793: Improper Neutralization of Input During Web Page Generation

A weakness has been identified in winston-dsouza Ecommerce-Website up to 87734c043269baac0b4cfe9664784462138b1b2e. Affected by this issue is some unknown functionality of the file /includes/headermenu.php of the component GET Parameter Handler. Executing manipulation of the argument Error can lea...

The vulnerability of the Microsoft 365 Defender Portal’s security management platform arises from the lack of measures taken to protect the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of the Microsoft 365 Defender Portal exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CVE-2025-12123

creationtimestamp| type| source ---|---|--- 2025-11-27 07:00:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6lsdaazux2u...

The vulnerability of the microprogrammed software of the Zenitel TCIV-3+ IP video door phones lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary codes.

The vulnerability of the microprogrammed software of the Zenitel TCIV-3+ IP video door phones is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Nagios XI monitoring tool, related to the lack of protective measures for the website structure, allows attackers to execute arbitrary code.

The vulnerability of the Nagios XI monitoring tool is related to the lack of measures taken to protect the website structure when loading the entry page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the Bulk Modification Tool, a tool for monitoring IT infrastructure, in Nagios XI allows a attacker to execute arbitrary code.

The vulnerability of the Bulk Modification Tool, a tool for monitoring IT infrastructure in Nagios XI, is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

WordPress Elementor Website Builder plugin <= 3.33.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bonds in WordPress Plugin Elementor Website Builder versions = 3.33.0...

CVE-2025-13561

A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

EUVD-2025-198580

A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

EUVD-2025-198577

A vulnerability was found in SourceCodester Company Website CMS 1.0. This affects an unknown part of the file /admin/reset-password.php. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

CVE-2025-13561 SourceCodester Company Website CMS index.php sql injection

A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...