253 matches found
CVE-2025-56289
code-projects Document Management System 1.0 has a Cross Site Scripting XSS vulnerability, where attackers can leak admin's cookie information by entering malicious XSS code in the Company field when adding files...
CVE-2025-52074
PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting XSS due to lack of input sanitization in the quantity parameter when adding a product to the cart...
PT-2025-37336
Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Online Shopping Portal version 2.1 Description: PHPGURUKUL Online Shopping Portal version 2.1 is susceptible to Cross Site Scripting XSS due to insufficient input sanitization. The issue occurs in the quantity parameter when a...
CVE-2025-52074
PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting XSS due to lack of input sanitization in the quantity parameter when adding a product to the cart...
CVE-2025-52074
The CVE-2025-52074 entry concerns PHPGURUKUL Online Shopping Portal 2.1 with a Cross-Site Scripting (XSS) vulnerability in the quantity parameter used when adding a product to the cart. Root cause identified in the description is missing input sanitization for that parameter. The connected source...
CVE-2025-48523
In onCreate of SelectAccountActivity.java, there is a possible way to add contacts without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-26463
In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages. This could lead to a local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-26463
In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages. This could lead to a local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
tracing: Add down_write(trace_event_sem) when adding trace event
...
ASB-A-388032224
In onCreate of SelectAccountActivity.java, there is a possible way to add contacts without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
AZL-73572 CVE-2025-38539 affecting package kernel for versions less than 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: tracing: Add downwritetraceeventsem when adding trace event When a module is loaded, it adds trace events defined by the module. It may also need to modify the modules trace printk formats to replace enum names with their values...
ublk: santizize the arguments from userspace when adding a device
...
net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
...
CVE-2025-38182
In the Linux kernel, the following vulnerability has been resolved: ublk: santizize the arguments from userspace when adding a device Sanity check the values for queue depth and number of queues we get from userspace when adding a device...
Simple Pizza Ordering System adding-exec.php File SQL Injection Vulnerability
Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ingname in the file /adding-exec.php. An attacker can exploit this...
CVE-2025-6363
A vulnerability, which was classified as critical, was found in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /adding-exec.php. The manipulation of the argument ingname leads to sql injection. It is possible to launch the attack remotely...
CVE-2025-6363
The CVE-2025-6363 entry concerns code-projects Simple Pizza Ordering System 1.0. Affected is the file /adding-exec.php, where the ingname parameter is unsafely handled, producing an SQL injection vulnerability. Descriptions across multiple sources consistently state remote exploitation is possibl...
Code-Projects Simple Pizza Ordering System 安全漏洞
Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ingname in the file /adding-exec.php. An attacker can exploit this...