5 matches found
CVE-2025-6311
A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/accountadd.php. The manipulation of the argument id/amount leads to sql injection. It is possible to initiate the attack remotely. The exploit...
CampCodes Sales and Inventory System 注入漏洞
CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. An injection vulnerability exists in CampCodes Sales and Inventory System version 1.0, which stems from an improper handling of the parameter id/amount in the file /pages/accountadd.php resulting in a SQL...
CVE-2022-26173
JForum v2.8.0 was discovered to contain a Cross-Site Request Forgery CSRF via http://targethost:port/jforum-2.8.0/jforum.page, which allows attackers to arbitrarily add admin accounts...
GHSA-79M2-H67V-35Q7 Elefant CMS CSRF Vulnerability
An issue was discovered in Elefant CMS before 2.0.5. There is a CSRF vulnerability that can add an account via user/add...
AVAVoIP v1.5.12 - Multiple Web Vulnerabilities
Document Title: =============== AVAVoIP v1.5.12 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=437 Release Date: ============= 2012-06-28 Vulnerability Laboratory ID VL-ID: ==================================== 611 Common...