574 matches found
PT-2024-16730
Name of the Vulnerable Software and Affected Versions CodeAstro Real Estate Management System versions up to 1.0 Description A critical issue affects the CodeAstro Real Estate Management System, specifically the /aboutedit.php file of the About Us Page component. The manipulation of the id argume...
CVE-2024-11000
A vulnerability classified as problematic was found in CodeAstro Real Estate Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /aboutedit.php of the component About Us Page. The manipulation of the argument aimage leads to unrestricted upload. The attac...
CVE-2024-11000
A vulnerability classified as problematic was found in CodeAstro Real Estate Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /aboutedit.php of the component About Us Page. The manipulation of the argument aimage leads to unrestricted upload. The attac...
CVE-2024-10999
A vulnerability classified as problematic has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /aboutadd.php of the component About Us Page. The manipulation of the argument aimage leads to unrestricted upload. It is possible to launch the...
CVE-2024-11000 CodeAstro Real Estate Management System About Us Page aboutedit.php unrestricted upload
A vulnerability classified as problematic was found in CodeAstro Real Estate Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /aboutedit.php of the component About Us Page. The manipulation of the argument aimage leads to unrestricted upload. The attac...
CVE-2024-10999 CodeAstro Real Estate Management System About Us Page aboutadd.php unrestricted upload
A vulnerability classified as problematic has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /aboutadd.php of the component About Us Page. The manipulation of the argument aimage leads to unrestricted upload. It is possible to launch the...
CVE-2024-10999 CodeAstro Real Estate Management System About Us Page aboutadd.php unrestricted upload
A vulnerability classified as problematic has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /aboutadd.php of the component About Us Page. The manipulation of the argument aimage leads to unrestricted upload. It is possible to launch the...
PT-2024-16691 · Unknown · Codeastro Real Estate Management System
Name of the Vulnerable Software and Affected Versions: CodeAstro Real Estate Management System version 1.0 Description: A vulnerability has been found in the CodeAstro Real Estate Management System. The issue is related to an unknown function of the file /aboutadd.php of the component About Us...
Security Bulletin: IBM Cognos Analytics Mobile (iOS) is affected by multiple vulnerabilities
Summary There are vulnerabilities in Open Source Software OSS libraries consumed by IBM Cognos Analytics Mobile. These issues have been addressed by upgrading or removing the vulnerable libraries. Additionally, vulnerabilites related to CORS misconfiguration and Certificate Pinning have been...
PT-2024-13392 · Temenos · Temenos T24 Browser
Name of the Vulnerable Software and Affected Versions: Temenos T24 Browser version R19.40 Description: A reflected Cross-Site Scripting XSS issue was discovered, allowing a remote attacker to execute arbitrary JavaScript code. This is achieved via the skin parameter in the "about.jsp" and...
ZZCMS 路径遍历漏洞
ZZCMS is a content management system CMS by the ZZCMS team in China. A path traversal vulnerability exists in ZZCMS version 2023, which stems from the parameter skin in the file /admin/aboutedit.php?action=modify that causes path traversal. No details of the vulnerability are provided at this tim...
GHSA-QGJ8-G9Q4-7F2P gotortc vulnerable to Cross-Site Request Forgery
gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to Cross-Site Request Forgery. The /api/config endpoint allows one to modify the existing configuration with user-supplied values. While the API is only allowing localhost to interact without authentication, an...
PT-2024-29384 · Dzzoffice · Dzzoffice
Name of the Vulnerable Software and Affected Versions: dzzoffice version 2.02.1 Description: The issue allows for Directory Traversal via the user/space/about.php endpoint. This means an attacker could potentially access files outside the intended directory structure by manipulating the input to...
CVE-2024-41376
dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php...
PT-2024-38233 · Sourcecodester · Sourcecodester Lot Reservation Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Lot Reservation Management System version 1.0 Description: A problematic issue was found in the system, affecting the file "/admin/ajax.php?action=save settings". The manipulation of the about argument leads to cross-site...
SourceCodester Lot Reservation Management System 跨站脚本漏洞
SourceCodester Lot Reservation Management System is a parking lot reservation management system from SourceCodester, Inc. A cross-site scripting vulnerability exists in SourceCodester Lot Reservation Management System version 1.0, which stems from an incorrect manipulation of the about parameter...
Malicious code in sap-about (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 850696bbc92b40c1859364ea39701d4fc1e460527c5e8c0aa5ef6422b36fee99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7786 Malicious code in sap-about (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 850696bbc92b40c1859364ea39701d4fc1e460527c5e8c0aa5ef6422b36fee99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...