3457 matches found
CVE-2023-27250
The CVE describes a SQL Injection vulnerability in the Online Book Store Project v1.0, exploitable via the endpoint /bookstore/bookPerPub.php . The CVSS v3.1 base score is 9.8 (CRITICAL) with an attack vector of Network , no privileges required, no user interaction, and impacts on Confidentiality...
Online Book Store SQL注入漏洞
Online Book Store is an online bookstore by the individual developer Arvin Arandilla. A security vulnerability exists in Online Book Store Project v1.0, which originates from a SQL injection vulnerability in /bookstore/bookPerPub.php...
CVE-2023-27250
Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php...
CVE-2023-27250
Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php...
Exploit for Insufficiently Protected Credentials in Kyocera Net_Viewer
kyocera-cve-2022-1026 An unauthenticated data extraction vulne...
Fedora: Security Advisory for unpaper (FEDORA-2023-a5e10b188a)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2023-0351
The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This could allow an attacker to upload files with executable command instructions...
Command injection
The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This could allow an attacker to upload files with executable command instructions...
CVE-2023-0351 CVE-2023-0351
The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This could allow an attacker to upload files with executable command instructions...
CVE-2023-0351
The CVE-2023-0351 issue affects Akuvox E11 (all versions) where the web server backend library allows command injection in the device’s phone-book contacts functionality, enabling an attacker to upload files with executable command instructions. Public sources cite a high-severity CVSSv3.1 base s...
PT-2023-16203 · Akuvox · Akuvox E11
Name of the Vulnerable Software and Affected Versions: Akuvox E11 affected versions not specified Description: The issue concerns command injection in the device phone-book contacts functionality of the Akuvox E11 web server backend library. This could allow an attacker to upload files with...
lmxcms SQL注入漏洞
lmxcms dream cms is a website builder system of China Dream Cms lmxcms company. SQL injection vulnerability exists in lmxcms version 1.41, the vulnerability stems from a security issue in the function reply in the file BookAction.class.php, which leads to SQL injection via the parameter id...
PT-2023-16894 · Lmxcms · Lmxcms
Name of the Vulnerable Software and Affected Versions: lmxcms version 1.41 Description: A critical issue was found in the function reply of the file BookAction.class.php. The manipulation of the argument id with the input 1 and updatexml0,concat0x7e,user,1 leads to sql injection. The attack may b...
CVE-2023-0578
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies Book Cites allows Cross-Site Scripting XSS.This issue affects Book Cites: before 23.01.05...
CVE-2023-0578 Multiple XSS in ASOS Information Technologies' Book Cites
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies Book Cites allows Cross-Site Scripting XSS. This issue affects Book Cites: before 23.01.05...
CVE-2023-0578 Multiple XSS in ASOS Information Technologies' Book Cites
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies Book Cites allows Cross-Site Scripting XSS. This issue affects Book Cites: before 23.01.05...
CVE-2023-0578
CVE-2023-0578 describes a Cross-Site Scripting (XSS) vulnerability in ASOS Information Technologies’ Book Cites, affecting versions before 23.01.05. The issue arises from improper neutralization of input during web page generation, enabling injection of malicious script into web pages viewed by o...
ASOS Book Cites 跨站脚本漏洞
ASOS Book Cites is a website. A security vulnerability exists in ASOS Book Cites versions prior to 23.01.05 that stems from improper neutralization of user input. An attacker could exploit the vulnerability to conduct a cross-site scripting attack...
Access Control Vulnerability in Admin Address Book
Description An Access Control Vulnerability allows a low level user in the web application to view and edit information for all other users in the Admin Address Book. Proof of Concept Step 1. Login to the openemr web application as a low level user Ex: Receptionist in openemr demo \ Step 2. Trave...