2394 matches found
Chaty < 3.0.3 - Admin+ SQLi
The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as admin...
Sanitization Management System 跨站脚本漏洞
Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A security vulnerability exists in Sanitization Management System, which originates from unknown functionality in the component the file admin/?page=systeminf, and can be exploited by an attack...
HMS-PHP 安全漏洞
HMS-PHP is a CSE309 IUB final web application project by the individual developer Pingkon Augustine Rozario. A security vulnerability exists in Pingkon HMS-PHP, which stems from an unknown function in the file /admin/admin.php being affected, where manipulation of the parameter uname/pass can lea...
Add Comments <= 1.0.1 - Admin+ Stored XSS
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. POST /wp-admin/options-general.php?page=addCommen...
CVE-2022-43124
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manageuser...
CVE-2022-43076
A cross-site scripting XSS vulnerability in /admin/edit-admin.php of Web-Based Student Clearance System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtemail parameter...
CVE-2022-43354
Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/managerequest...
Sql injection
Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...
Sql injection
Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/managerequest...
CVE-2022-43084
A cross-site scripting XSS vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the vname parameter...
CVE-2022-43354
Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/managerequest...
CVE-2022-43126
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/managetest.php...
CVE-2022-43230
Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=bookings/viewdetails...
CVE-2022-43230
Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=bookings/viewdetails...
CVE-2022-3714
A vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. Affected is an unknown function of the file admin/?page=orders/vieworder. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. VDB-2123...
The vulnerability in the implementation of the wp-admin/post.php script of the Easy Testimonials plugin for WordPress content management systems allows attackers to perform cross-site scripting attacks.
The vulnerability of the wp-admin/post.php script of the Easy Testimonials plugin for WordPress content management systems exists because no measures are taken to protect the structure of web pages when processing parameters such as Client Name, Position, Web Address, Other, Location Reviewed,...
Simple Cold Storage Management System 跨站脚本漏洞
Simple Cold Storage Management System is a simple cold storage management system by Carlo Montero, an individual developer. A security vulnerability exists in SourceCodester Simple Cold Storage Management System version 1.0, which originates from an unknown part of the /csms/admin/?page=systeminf...
CVE-2022-40047
Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the page parameter at /flatpress/admin.php...