11958 matches found
CVE-2023-7175
A vulnerability was found in Campcodes Online College Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/borrowadd.php of the component HTTP POST Request Handler. The manipulation of the argument student leads to sql injectio...
Online College Library System SQL Injection Vulnerability
Online College Library System is an online college library system. A SQL injection vulnerability exists in Online College Library System version 1.0, which originates from a security issue in the /admin/returnadd.php page...
PT-2023-32921 · Unknown · Campcodes Online College Library System
Name of the Vulnerable Software and Affected Versions: Campcodes Online College Library System version 1.0 Description: A critical issue affects some unknown functionality of the file /admin/borrow add.php of the component HTTP POST Request Handler. The manipulation of the student argument leads ...
Online College Library System SQL Injection Vulnerability
Online College Library System is an online college library system. A SQL injection vulnerability exists in Online College Library System version 1.0, which originates from a security issue in the /admin/borrowadd.php page...
DedeBIZ Code Issue Vulnerability
DedeBIZ is a content management system from the Chinese company Muyun Intelligent Technology DedeBIZ. A code issue vulnerability exists in Muyun DedeBIZ versions prior to 6.2.12, which stems from the component Add Attachment Handler that causes unrestricted uploads...
PT-2023-32927 · Unknown · Muyun Dedebiz
Name of the Vulnerable Software and Affected Versions: Muyun DedeBIZ versions up to 6.2.12 Description: A critical issue was found in the component Add Attachment Handler, allowing for unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public. The vend...
CVE-2023-7160
A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add Engineer Handler. The manipulation of the argument first name/last name with the input alert0 leads to cross site...
CVE-2023-7160
A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add Engineer Handler. The manipulation of the argument first name/last name with the input alert0 leads to cross site...
Cross site scripting
A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add Engineer Handler. The manipulation of the argument first name/last name with the input alert0 leads to cross site...
CVE-2023-7160 SourceCodester Engineers Online Portal Add Engineer cross site scripting
A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Add Engineer Handler. The manipulation of the argument first name/last name with the input alert0 leads to cross site...
PYSEC-2023-257
A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function pollsetaddfd of the file extmod/modselect.c. The manipulation leads to use after free. The exploit has been disclosed to the public and may be used. The...
PT-2023-30920 · Unknown · Student Result Management System
Name of the Vulnerable Software and Affected Versions: Student Result Management System version 1.0 Description: The issue concerns unauthenticated SQL Injection vulnerabilities. Specifically, the class name parameter of the "add classes.php" resource does not validate the characters received, an...
Engineers Online Portal Cross-Site Scripting Vulnerability
Engineers Online Portal is open source an online portal . It is developed using PHP, MySQL database, HTML, CSS, Javascript, jQuery, Ajax, Bootstrap and some other libraries. A cross-site scripting vulnerability exists in SourceCodester Engineers Online Portal version 1.0, which stems from the...
CVE-2023-50873
Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Add Any Extension to Pages.This issue affects Add Any Extension to Pages: from n/a through 1.4...
CVE-2023-50873
Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Add Any Extension to Pages.This issue affects Add Any Extension to Pages: from n/a through 1.4...
CVE-2023-32795
Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3...
CVE-2023-32795
Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3...
Deserialization of untrusted data
Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Marios Alexandrou Add Any Extension to Pages.This issue affects Add Any Extension to Pages: from n/a through 1.4...