9 matches found
CVE-2025-60318
SourceCodester Pet Grooming Management Software version 1.0 is vulnerable to Cross-Site Scripting (XSS) due to insufficient validation of the fname (First Name) and lname (Last Name) fields in the /admin/profile.php component. An attacker could exploit this to inject malicious scripts into the we...
EUVD-2021-29213
Malicious code in bioql PyPI...
CVE-2022-28866
Multiple Improper Access Control was discovered in Nokia AirFrame BMC Web GUI R18 Firmware v4.13.00. It does not properly validate requests for access to or editing of data and functionality in all endpoints under /settings/ and /api/settings/. By not verifying the permissions for access to...
Improper access control
Multiple Improper Access Control was discovered in Nokia AirFrame BMC Web GUI R18 Firmware v4.13.00. It does not properly validate requests for access to or editing of data and functionality in all endpoints under /settings/ and /api/settings/. By not verifying the permissions for access to...
CVE-2021-42235
SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality...
CVE-2021-42235
SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality...
CVE-2021-42235
SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality...
PT-2022-11576
Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.14.8 osTicket versions prior to 1.15.4 Description The issue allows attackers to perform SQL injection in the login and password reset process, enabling them to access the administration profile functionality...
CVE-2021-42235: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality...