CVE-2024-8135

A vulnerability classified as critical has been found in Go-Tribe gotribe up to cd3ccd32cd77852c9ea73f986eaf8c301cfb6310. Affected is the function Sign of the file pkg/token/token.go. The manipulation of the argument config.key leads to hard-coded credentials. Continious delivery with rolling...

CVE-2024-7496

A vulnerability has been found in itsourcecode Airline Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack can be initiated remotely. The exploit has been...

The vulnerability of the Gogs self-managed Git repository creation software lies in the possibility of manipulating arguments, allowing a hacker to execute arbitrary commands.

The vulnerability of the Gogs self-managed Git repository creation software is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands...

PT-2024-37690 · Unknown · Codeigniter

Name of the Vulnerable Software and Affected Versions: CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03 Description: A problematic vulnerability has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap. The manipulation of the argument search...

CVE-2024-5983 itsourcecode Online Bookstore bookPerPub.php sql injection

A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file bookPerPub.php. The manipulation of the argument pubid leads to sql injection. The attack can be launched remotely. The exploit...

CVE-2024-5379

A vulnerability was found in JFinalCMS up to 20240111. It has been rated as problematic. This issue affects some unknown processing of the file /admin/template. The manipulation of the argument directory leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2024-5372

CVE-2024-5372 affects Kashipara College Management System 1.0. The vulnerability is in the file submit_extracurricular_activity.php, where manipulation of the activity_contact parameter enables cross-site scripting. Exploitation can be performed remotely, and multiple connected sources corroborat...

CVE-2024-5356

A vulnerability, which was classified as critical, was found in anji-plus AJ-Report up to 1.4.1. Affected is an unknown function of the file /dataSet/testTransform;swagger-ui. The manipulation of the argument dynSentence leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-4526

CVE-2024-4526 affects Campcodes Complete Web-Based School Management System 1.0. The issue is a cross-site scripting vulnerability in the month parameter of /view/student_payment_details3.php. Attack could be initiated remotely and the exploit has been publicly disclosed. Multiple connected sourc...

The vulnerability of the xdg-desktop-portal interface of the application and Flatpak environments allows a attacker to exit from the isolated software environment and gain access to files on the host system.

The vulnerability of the xdg-desktop-portal interface of the application and Flatpak environments is related to the implementation or modification of arguments. Exploiting this vulnerability can allow an attacker to exit from a isolated software environment and gain access to files on the host...

CVE-2024-2779

A vulnerability was found in Campcodes Online Marriage Registration System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/application-bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. It is possible t...

CVE-2024-2150 SourceCodester Insurance Management System file inclusion

A vulnerability, which was classified as critical, has been found in SourceCodester Insurance Management System 1.0. This issue affects some unknown processing. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to t...

The vulnerability of the microprogrammed anti-vandalism network IP station Commend WS203VICM lies in the ability to insert or modify arguments, allowing a intruder to restart the system.

The vulnerability of the microprogrammed anti-vandalism network IP station Commend WS203VICM is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to restart the system using a specially crafted message...

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. Affected is an unknown function of the file /process/assignp.php of the component Project Assignment Report. The manipulation of the argument pname leads to cross site scripting. It i...

Cross site scripting

A vulnerability was found in Cogites eReserv 7.7.58 and classified as problematic. This issue affects some unknown processing of the file front/admin/config.php. The manipulation of the argument id with the input %22%3E%3Cscript%3Ealert%27XSS%27%3C/script%3E leads to cross site scripting. The...

Sql injection

A vulnerability was found in Novel-Plus 4.3.0-RC1 and classified as critical. This issue affects some unknown processing of the file /novel/bookComment/list. The manipulation of the argument sort leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier...

CVE-2024-0771

Nsasoft Product Key Explorer 4.0.9 is affected by a local memory corruption vulnerability in the Registration Handler caused by manipulating the Name/Key argument. The issue is described across multiple sources as requiring local access, with an exploit disclosed publicly. There is no validated p...

Sql injection

A vulnerability classified as critical has been found in Taokeyun up to 1.0.5. This affects the function index of the file application/index/controller/app/Video.php of the component HTTP POST Request Handler. The manipulation of the argument cid leads to sql injection. It is possible to initiate...

CVE-2023-7215

CVE-2023-7215 affects Chanzhaoyu chatgpt-web version 2.11.1. The vulnerability is a cross-site scripting flaw triggered by manipulating the Description argument with the input "". Exploitation is remote and the vulnerability has been publicly disclosed. Affected component is the input handling fo...

Sql injection

A vulnerability was found in 7-card Fakabao up to 1.0build20230805. It has been classified as critical. This affects an unknown part of the file shop/wxpaynotify.php. The manipulation of the argument outtradeno leads to sql injection. The exploit has been disclosed to the public and may be used...