15 matches found
CVE-2025-57389
A reflected cross-site scripting XSS vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. This vulnerability was fixed in OpenWRT v19.07.0...
CVE-2025-57389
A reflected cross-site scripting XSS vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. This vulnerability was fixed in OpenWRT v19.07.0...
CVE-2025-8967
The CVE-2025-8967 entry concerns itsourcecode Online Tour and Travel Management System 1.0. A SQL injection flaw exists in the file /admin/operations/packages.php, caused by manipulating the pname argument in an unknown function. This vulnerability allows remote exploitation (attack vector: netwo...
CVE-2025-8967 itsourcecode Online Tour and Travel Management System packages.php sql injection
A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /admin/operations/packages.php. The manipulation of the argument pname leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...
CVE-2024-7662: Cross-Site Request Forgery (CSRF)
A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problematic. This vulnerability affects the function savepackage of the file admin/packages/managpackage.php. The manipulation leads to cross-site request forgery. The attack can be...
PT-2024-38490
Name of the Vulnerable Software and Affected Versions SourceCodester Car Driving School Management System version 1.0 Description A vulnerability was found in the system, affecting the save package function of the file admin/packages/manag package.php. This issue leads to cross-site request forge...
CVE-2022-35421
Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php...
Online Tours And Travels Management System SQL注入漏洞
Online Tours And Travels Management System is an online travel management system by Carlo Montero, an individual developer. A security vulnerability exists in Online Tours And Travels Management System v1.0, which can be exploited by an attacker to perform SQL injection using the pname parameter ...
CVE-2021-38366
Sitecore through 10.1, when Update Center is enabled, allows remote authenticated users to upload arbitrary files and achieve remote code execution by visiting an uploaded .aspx file at an admin/Packages URL...
CVE-2021-38366
Sitecore through 10.1, when Update Center is enabled, allows remote authenticated users to upload arbitrary files and achieve remote code execution by visiting an uploaded .aspx file at an admin/Packages URL...
CVE-2021-38366
Sitecore through 10.1, when Update Center is enabled, allows remote authenticated users to upload arbitrary files and achieve remote code execution by visiting an uploaded .aspx file at an admin/Packages URL...
CVE-2021-38366: Unrestricted Upload of File with Dangerous Type
Sitecore through 10.1, when Update Center is enabled, allows remote authenticated users to upload arbitrary files and achieve remote code execution by visiting an uploaded .aspx file at an admin/Packages URL...
Sitecore 代码问题漏洞
Sitecore is an online marketing content management system CMS from Sitecore, Denmark. The system supports content editing, multilingualism, multi-site deployment, digital asset management, etc. A security vulnerability exists in Sitecore 10.1 and earlier versions, which allows remote authenticate...
PT-2021-22084
Name of the Vulnerable Software and Affected Versions Sitecore versions prior to 10.2 Description The issue allows remote authenticated users to upload arbitrary files and achieve remote code execution by visiting an uploaded .aspx file at an 'admin/Packages' URL when Update Center is enabled...