5044 matches found
CVE-2024-45517
An issue was discovered in Zimbra Collaboration ZCS through 10.1. A Cross-Site Scripting XSS vulnerability in the /h/rest endpoint of the Zimbra webmail and admin panel interfaces allows attackers to execute arbitrary JavaScript in the victim's session. This issue is caused by improper sanitizati...
CVE-2024-45517
CVE-2024-45517 affects Zimbra Collaboration (ZCS) up to version 10.1, with a cross-site scripting (XSS) flaw in the "/h/rest" endpoint of the webmail/admin UI. Root cause: improper sanitization of user input in that endpoint, enabling arbitrary JavaScript in a victim’s session. Exploitation requi...
Virtuozzo Hybrid Infrastructure 6.3 Hotfix 1 (6.3.0-177)
This update provides stability and performance improvements. Vulnerability id: VSTOR-91833 A performance improvement. Vulnerability id: VSTOR-94382 Increased the number of Grafana dashboards that can be added to the Dashboard Directory. Vulnerability id: VSTOR-94508 In the admin panel, LUNs are n...
PT-2024-16865 · Unknown · 1000 Projects Beauty Parlour Management System
Name of the Vulnerable Software and Affected Versions: 1000 Projects Beauty Parlour Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown part of the file /admin/forgot-password.php. The manipulation of the email argument leads to SQL injection. Thi...
CVE-2024-50831
A SQL Injection was found in /admin/adminuser.php in kashipara E-learning Management System Project 1.0 via the username and password parameters...
CVE-2024-50839
A Stored Cross-Site Scripting XSS vulnerability was found in /admin/addsubject.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the subjectcode and title parameters...
The vulnerability of the /cgi/login file in the Administration Panel of Tp-Link MR200 wireless access points allows a intruder to cause a service failure.
The vulnerability of the /cgi/login file in the Administration Panel of Tp-Link MR200 wireless access points is related to the manipulation of the null pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
Beauty Parlour Management System Cross-Site Scripting Vulnerability (CNVD-2025-20923)
Beauty Parlour Management System is a software system for standardizing salon business processes and improving management efficiency. Beauty Parlour Management System suffers from a cross-site scripting vulnerability, which originates from a cross-site scripting vulnerability in...
CVE-2019-20458
An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. By default, the device comes and functions without a password. The user is at no point prompted to set up a password on the device leaving a number of devices without a password. In this case, anyone connecting to the we...
PT-2024-10734 · Epson · Epson Expression Home Xp255
Name of the Vulnerable Software and Affected Versions: Epson Expression Home XP255 version 20.08.FM10I8 Description: An issue was discovered where the device comes without a password and the user is not prompted to set one up, allowing anyone to access the web admin panel and become admin without...
CVE-2019-20458
An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. By default, the device comes and functions without a password. The user is at no point prompted to set up a password on the device leaving a number of devices without a password. In this case, anyone connecting to the we...
CVE-2024-10740
A vulnerability, which was classified as critical, was found in code-projects E-Health Care System up to 1.0. This affects an unknown part of the file /Admin/consultingdetail.php. The manipulation of the argument consultingid leads to sql injection. It is possible to initiate the attack remotely...
PHPGurukul Beauty Parlour Management System 安全漏洞
Beauty Parlour Management System is a software system for standardizing salon business processes and improving management efficiency. Beauty Parlour Management System suffers from a cross-site scripting vulnerability, which originates from a cross-site scripting vulnerability in...
CVE-2024-48461
Cross Site Scripting vulnerability in TeslaLogger Admin Panel before v.1.59.6 allows a remote attacker to execute arbitrary code via the New Journey field...
PT-2024-33121 · Unknown · Teslalogger
Name of the Vulnerable Software and Affected Versions: TeslaLogger versions prior to 1.59.6 Description: A Cross Site Scripting issue in the Admin Panel allows a remote attacker to execute arbitrary code via the New Journey field. Recommendations: For versions prior to 1.59.6, update to version...
CVE-2024-48461
Cross Site Scripting vulnerability in TeslaLogger Admin Panel before v.1.59.6 allows a remote attacker to execute arbitrary code via the New Journey field...
Virtuozzo Hybrid Infrastructure 6.3 (6.3.0-170)
In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover the compute service and our ecosystem of backup and disaster recovery solutions. Additionally, this release delivers stability and security improvements, and addresses issues found in previous releases...
CVE-2024-48461
Cross Site Scripting vulnerability in TeslaLogger Admin Panel before v.1.59.6 allows a remote attacker to execute arbitrary code via the New Journey field...
CVE-2024-10446 Project Worlds Online Time Table Generator admindashboard.php sql injection
A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. Affected is an unknown function of the file /timetable/admin/admindashboard.php?info=addcourse. The manipulation of the argument c leads to sql injection. It is possible to launch the attack...