65 matches found
CVE-2024-11000: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as problematic was found in CodeAstro Real Estate Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /aboutedit.php of the component About Us Page. The manipulation of the argument aimage leads to unrestricted upload. The attac...
PT-2024-16691 · Unknown · Codeastro Real Estate Management System
Name of the Vulnerable Software and Affected Versions: CodeAstro Real Estate Management System version 1.0 Description: A vulnerability has been found in the CodeAstro Real Estate Management System. The issue is related to an unknown function of the file /aboutadd.php of the component About Us...
CVE-2024-2752: Improper Neutralization of Input During Web Page Generation
The Where Did You Hear About Us Checkout Field for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via order meta in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...
CVE-2023-3878
A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/about-us.php. The manipulation of the argument pagedes leads to sql injection. The attack can be initiated remotely. The exploit...
Campcodes Beauty Salon Management System SQL注入漏洞
Campcodes Beauty Salon Management System is a beauty salon management system from Campcodes, Inc. Campcodes Beauty Salon Management System suffers from a SQL injection vulnerability that stems from the operation of the pagedes parameter of unknown code in the file /admin/about-us.php that can lea...
PT-2023-26602 · Unknown · Campcodes Beauty Salon Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A critical issue has been found in the system, affecting the /admin/about-us.php file. The manipulation of the pagedes argument leads to SQL injection. This issue can be...
CVE-2023-37745
A cross-site scripting XSS vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Description of the /admin/aboutus.php component...
Exploit for Cross-site Scripting in Vehicle_Service_Management_System_Project Vehicle_Service_Management_System
CVE-2021-46074 Exploit Title: Vehicle Service Management...
CVE-2021-44317
In Bus Pass Management System v1.0, parameters 'pagedes' and About Us are affected with a Stored Cross-site scripting vulnerability...
CVE-2021-44317
In Bus Pass Management System v1.0, parameters 'pagedes' and About Us are affected with a Stored Cross-site scripting vulnerability...
Cross site scripting
In Bus Pass Management System v1.0, parameters 'pagedes' and About Us are affected with a Stored Cross-site scripting vulnerability...
PT-2021-24080 · Unknown · Bus Pass Management System
Name of the Vulnerable Software and Affected Versions: Bus Pass Management System version 1.0 Description: The issue is related to a Stored Cross-site scripting vulnerability. Parameters pagedes and About Us are affected. Recommendations: For Bus Pass Management System version 1.0, consider...
Bus Pass Management System 跨站脚本漏洞
Bus Pass Management System is a bus pass management system. v1.0 of Bus Pass Management System is vulnerable to a cross-site scripting vulnerability that stems from the lack of data validation filtering of user-supplied data and output in the parameters pagedes and About Us. An attacker could...
CVE-2021-44317: Improper Neutralization of Input During Web Page Generation
In Bus Pass Management System v1.0, parameters 'pagedes' and About Us are affected with a Stored Cross-site scripting vulnerability...
Stored Cross-Site Scripting Vulnerability in the YoYo Housing App
YouYouGoodHouse app is a rental app created by Chengdu GoodHouse Technology Co. A stored cross-site scripting vulnerability exists in the "About Us" section of the YouYouHaoRooms app. An attacker can insert malicious js code into the page to obtain user cookies and other information, resulting in...
Design/Logic Flaw
XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us/locations/index direction parameter...
CVE-2017-5877: Improper Neutralization of Input During Web Page Generation
XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us/locations/index direction parameter...
PT-2017-16729
Name of the Vulnerable Software and Affected Versions dotCMS version 3.7.0 Description A cross-site scripting XSS issue was found, allowing an unauthenticated attack against the "direction" parameter in the "/about-us/locations/index" API endpoint. Recommendations For dotCMS version 3.7.0, update...
ironmountain.ca XSS vulnerability
Vulnerable URL: http://www.ironmountain.ca/en/About-Us.aspx/Knowledge-Center/Reference-Library/Search-Result.aspx?topic=%22%3E%3Csvg/onload=window.onerror=alert;throw/OPENBUGBOUNTY/%3E0=teubieni Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability...