11881 matches found
CVE-2025-11069
A vulnerability was determined in westboy CicadasCMS 1.0. Affected by this issue is some unknown functionality of the file /system/org/save of the component Add Department Handler. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotel...
CVE-2025-11069
A vulnerability was determined in westboy CicadasCMS 1.0. Affected by this issue is some unknown functionality of the file /system/org/save of the component Add Department Handler. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotel...
CVE-2025-11070 Projectworlds Online Shopping System cart_add.php sql injection
A vulnerability was identified in Projectworlds Online Shopping System 1.0. This affects an unknown part of the file /store/cartadd.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...
CVE-2025-11069 westboy CicadasCMS Add Department save cross site scripting
A vulnerability was determined in westboy CicadasCMS 1.0. Affected by this issue is some unknown functionality of the file /system/org/save of the component Add Department Handler. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotel...
CVE-2025-11069 westboy CicadasCMS Add Department save cross site scripting
A vulnerability was determined in westboy CicadasCMS 1.0. Affected by this issue is some unknown functionality of the file /system/org/save of the component Add Department Handler. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotel...
CVE-2025-11069
CVE-2025-11069 (westboy CicadasCMS 1.0) affects the Add Department Handler: the vulnerability arises from manipulating the Name argument in the file /system/org/save, enabling cross-site scripting. The issue is exploitable remotely and, per multiple sources, the exploit has been publicly disclose...
CVE-2025-11067
A vulnerability has been found in Projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /myform.php of the component Add Visitor Page. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit...
CVE-2025-11067
CVE-2025-11067 affects Projectworlds Visitor Management System 1.0, specifically the Add Visitor Page’s unknown function in the /myform.php file. The issue arises from manipulating the Name parameter, resulting in a cross-site scripting vulnerability. Remote exploitation is possible, and exploits...
CVE-2025-11067 Projectworlds Visitor Management System Add Visitor myform.php cross site scripting
A vulnerability has been found in Projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /myform.php of the component Add Visitor Page. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit...
CVE-2025-26258
Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting XSS via 'Add Designation.'...
PT-2025-39730
Name of the Vulnerable Software and Affected Versions Projectworlds Visitor Management System version 1.0 Description A cross-site scripting issue exists in Projectworlds Visitor Management System version 1.0. The issue is related to the manipulation of the Name argument within an unknown functio...
CicadasCMS 代码注入漏洞
CicadasCMS is a content management framework based on SpringBoot Mybatis SpringSecurity Vue developed by westboy individual developer in China. A code injection vulnerability exists in CicadasCMS version 1.0, which originates from the incorrect operation of the parameter Name by the component Add...
Projectworlds Online Shopping System SQL注入漏洞
Projectworlds Online Shopping System is an online shopping system from the Austrian company Projectworlds. A SQL injection vulnerability exists in Projectworlds Online Shopping System version 1.0, which stems from a misuse of the parameter ID in the file /store/cartadd.php, which could lead to a...
CampCodes Online Learning Management System SQL注入漏洞
CampCodes Online Learning Management System is an online learning management system from CampCodes Philippines, Inc. A SQL injection vulnerability exists in CampCodes Online Learning Management System System version 1.0, which stems from an incorrect manipulation of the parameter Title in the fil...
CVE-2025-26258
Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting XSS via 'Add Designation.'...
CVE-2025-26258
Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting XSS via 'Add Designation.'...
Sourcecodester Employee Management System 安全漏洞
SourceCodester Employee Management System is a SourceCodester open source php-based system for employee performance management. A security vulnerability exists in Sourcecodester Employee Management System version 1.0, which originates from a cross-site scripting vulnerability in the Add Designati...
CVE-2025-26258
Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the Add Designation function. The root cause is insufficient sanitization of user-supplied data in the Add Designation workflow, allowing injected scripts to be executed in users’ browsers. Impact is in...
PT-2025-39660
Name of the Vulnerable Software and Affected Versions Sourcecodester Employee Management System version 1.0 Description The software is susceptible to Cross Site Scripting XSS attacks. The vulnerability is located in the 'Add Designation' functionality. The Add Designation feature does not proper...