Campcodes Beauty Salon Management System SQL注入漏洞

Campcodes Beauty Salon Management System is a beauty salon management system from Campcodes, Inc. Campcodes Beauty Salon Management System suffers from a SQL injection vulnerability that stems from the operation of the pagedes parameter of unknown code in the file /admin/about-us.php that can lea...

CVE-2023-37745

A cross-site scripting XSS vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Description of the /admin/aboutus.php component...

CVE-2021-44317

In Bus Pass Management System v1.0, parameters 'pagedes' and About Us are affected with a Stored Cross-site scripting vulnerability...

CVE-2021-44317

In Bus Pass Management System v1.0, parameters 'pagedes' and About Us are affected with a Stored Cross-site scripting vulnerability...

Cross site scripting

In Bus Pass Management System v1.0, parameters 'pagedes' and About Us are affected with a Stored Cross-site scripting vulnerability...

PT-2021-24080 · Unknown · Bus Pass Management System

Name of the Vulnerable Software and Affected Versions: Bus Pass Management System version 1.0 Description: The issue is related to a Stored Cross-site scripting vulnerability. Parameters pagedes and About Us are affected. Recommendations: For Bus Pass Management System version 1.0, consider...

Bus Pass Management System 跨站脚本漏洞

Bus Pass Management System is a bus pass management system. v1.0 of Bus Pass Management System is vulnerable to a cross-site scripting vulnerability that stems from the lack of data validation filtering of user-supplied data and output in the parameters pagedes and About Us. An attacker could...

Stored Cross-Site Scripting Vulnerability in the YoYo Housing App

YouYouGoodHouse app is a rental app created by Chengdu GoodHouse Technology Co. A stored cross-site scripting vulnerability exists in the "About Us" section of the YouYouHaoRooms app. An attacker can insert malicious js code into the page to obtain user cookies and other information, resulting in...

Design/Logic Flaw

XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us/locations/index direction parameter...

ironmountain.ca XSS vulnerability

Vulnerable URL: http://www.ironmountain.ca/en/About-Us.aspx/Knowledge-Center/Reference-Library/Search-Result.aspx?topic=%22%3E%3Csvg/onload=window.onerror=alert;throw/OPENBUGBOUNTY/%3E0=teubieni Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability...

electro-optical.com XSS vulnerability

Vulnerable URL: http://www.electro-optical.com/eoipage.asp?h=About Us1"--...

Advisory: Oracle EBusiness Suite Sensitive Information Disclosure Vulnerability

Version Affected: Oracle E-Business Suite Release 12, version 12.0.6 Oracle E-Business Suite Release 11i, version 11.5.10.2 CVE: 2008-5446 Description: The oracle E Business including applications like I-Recruitment etc is vulnerable to flaw which leads to sensitive information disclosure about t...

CVE-2008-5446

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not comment...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not comment...

CVE-2008-5446

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not comment...

CVE-2008-5446

CVE-2008-5446 concerns an unspecified vulnerability in the Oracle Applications Framework (OAF) component of Oracle E-Business Suite, affecting versions 11.5.10 CU2 and 12.0.6. The issue is described as allowing remote authenticated users to affect confidentiality via unknown vectors; there is a n...