3457 matches found
GHSA-QGJ5-4QVG-2F8C Liferay Portal is vulnerable to XSS attack through its Style Book theme
A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.17 allows a remote authenticated user to inject JavaScript code via Style Book theme name. This malicious payload is then reflected and executed within the user's browser...
Liferay Portal is vulnerable to XSS attack through its Style Book theme
A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.17 allows a remote authenticated user to inject JavaScript code via Style Book theme name. This malicious payload is then reflected and executed within the user's browser...
CVE-2025-43774
Rejected reason: This CVE ID is rejected. The reported vulnerability was found to be present only in a feature that was under development and protected by a beta feature flag. As a result, the issue was not exploitable in the official or public releases within the specified affected ranges, makin...
CVE-2025-43774
Connected sources describe a reflected XSS in Liferay Portal 7.4.3.132 and Liferay DXP 2025.Q1.0–2025.Q1.17, exploitable when a remote authenticated user injects JavaScript via the Style Book theme name. The issue is reflected in the user’s browser; no concrete fix/version is provided in the supp...
PT-2025-36537
Name of the Vulnerable Software and Affected Versions: Liferay Portal version 7.4.3.132 Liferay DXP versions 2025.Q1.0 through 2025.Q1.17 Description: A reflected cross-site scripting XSS vulnerability exists in Liferay Portal and DXP. A remote authenticated user can inject JavaScript code via th...
Malicious code in desk-shirt-book (npm)
The package desk-shirt-book was found to contain malicious code...
MAL-2025-46680 Malicious code in xi-book-try-scale-data (npm)
The package xi-book-try-scale-data was found to contain malicious code...
Malicious code in xi-book-try-scale-data (npm)
The package xi-book-try-scale-data was found to contain malicious code...
MAL-2025-43976 Malicious code in desk-shirt-book (npm)
The package desk-shirt-book was found to contain malicious code...
CVE-2025-9700
A flaw has been found in SourceCodester Online Book Store 1.0. This issue affects some unknown processing of the file /publisherlist.php. This manipulation of the argument pubid causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...
CVE-2025-9700
The CVE-2025-9700 entry concerns SourceCodester Online Book Store 1.0 where the /publisher_list.php endpoint processes the pubid parameter unsafely, enabling SQL injection. Several trusted sources corroborate a remote-executable SQL injection vulnerability stemming from incorrect handling of pubi...
CVE-2025-9700 SourceCodester Online Book Store publisher_list.php sql injection
A flaw has been found in SourceCodester Online Book Store 1.0. This issue affects some unknown processing of the file /publisherlist.php. This manipulation of the argument pubid causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...
SourceCodester Online Book Store 安全漏洞
SourceCodester Online Book Store is a SourceCodester open source online bookstore. A security vulnerability exists in SourceCodester Online Book Store version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter pubid in file /publisherlist.php...
Linux Distros Unpatched Vulnerability : CVE-2008-5152
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/inmail.log or 2 /tmp/inmail.stdin temporary file...
Arbitrary File Upload
Overview Affected versions of this package are vulnerable to Arbitrary File Upload via the style books component. An attacker can execute arbitrary code within the environment by uploading and processing unrestricted files. Remediation Upgrade com.liferay:com.liferay.style.book.web to version...
Beauty Parlour Management System book-appointment.php File SQL Injection Vulnerability
Beauty Parlour Management System is a software system for standardizing salon business processes and improving management efficiency. Beauty Parlour Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of externally entered SQL statements in t...
CVE-2025-9024
A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /book-appointment.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been...
CVE-2025-9024
A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /book-appointment.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been...