69 matches found
CVE-2026-5553
A vulnerability was identified in itsourcecode Online Cellphone System 1.0. Affected by this vulnerability is an unknown functionality of the file /cp/available.php of the component Parameter Handler. Such manipulation of the argument Name leads to sql injection. The attack can be launched...
EUVD-2026-19054
A vulnerability was identified in itsourcecode Online Cellphone System 1.0. Affected by this vulnerability is an unknown functionality of the file /cp/available.php of the component Parameter Handler. Such manipulation of the argument Name leads to sql injection. The attack can be launched...
CVE-2026-5553
A vulnerability was identified in itsourcecode Online Cellphone System 1.0. Affected by this vulnerability is an unknown functionality of the file /cp/available.php of the component Parameter Handler. Such manipulation of the argument Name leads to sql injection. The attack can be launched...
CVE-2026-5553 itsourcecode Online Cellphone System Parameter available.php sql injection
A vulnerability was identified in itsourcecode Online Cellphone System 1.0. Affected by this vulnerability is an unknown functionality of the file /cp/available.php of the component Parameter Handler. Such manipulation of the argument Name leads to sql injection. The attack can be launched...
CVE-2026-5553 itsourcecode Online Cellphone System Parameter available.php sql injection
A vulnerability was identified in itsourcecode Online Cellphone System 1.0. Affected by this vulnerability is an unknown functionality of the file /cp/available.php of the component Parameter Handler. Such manipulation of the argument Name leads to sql injection. The attack can be launched...
CVE-2026-5553
The CVE-2026-5553 entry concerns itsourcecode Online Cellphone System 1.0. Affected functionality is an unknown aspect of /cp/available.php in the Parameter Handler, where manipulating the Name parameter leads to SQL injection. The vulnerability is exploitable remotely, with the exploit reportedl...
PT-2026-30423
A vulnerability was identified in itsourcecode Online Cellphone System 1.0. Affected by this vulnerability is an unknown functionality of the file /cp/available.php of the component Parameter Handler. Such manipulation of the argument Name leads to sql injection. The attack can be launched...
itsourcecode Online Cellphone System SQL注入漏洞
itsourcecode Online Cellphone System is an open-source online call system developed by itsourcecode. Version 1.0 of itsourcecode Online Cellphone System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “Name” in the file/cp/available.php, which...
EUVD-2023-43760
Malicious code in bioql PyPI...
EUVD-2023-44134
Malicious code in bioql PyPI...
EUVD-2023-44304
Malicious code in bioql PyPI...
EUVD-2023-44320
Malicious code in bioql PyPI...
CVE-2023-3473
A vulnerability, which was classified as critical, was found in Campcodes Retro Cellphone Online Store 1.0. Affected is an unknown function of the file /admin/editproduct.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The explo...
CVE-2023-3068
A vulnerability classified as critical has been found in Campcodes Retro Cellphone Online Store 1.0. Affected is an unknown function of the file /admin/modaladdproduct.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack remotely. The exploit...
CVE-2023-3396
A vulnerability was found in Campcodes Retro Cellphone Online Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument username/password leads to sql injection. The attack can be launched...
CVE-2023-37032
A Stack-based buffer overflow in the Mobile Management Entity MME of Magma versions = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet containing an oversized Emergency Number Lis...
China-Aligned MirrorFace Hackers Target EU Diplomats with World Expo 2025 Bait
The China-aligned threat actor known as MirrorFace has been observed targeting a diplomatic organization in the European Union, marking the first time the hacking crew has targeted an entity in the region. "During this attack, the threat actor used as a lure the upcoming World Expo, which will be...
CVE-2023-3681
A vulnerability classified as problematic was found in Campcodes Retro Cellphone Online Store 1.0. This vulnerability affects unknown code of the file /admin/modaladdproduct.php. The manipulation of the argument description leads to cross site scripting. The attack can be initiated remotely. The...
CVE-2023-3681
CVE-2023-3681 affects Campcodes Retro Cellphone Online Store 1.0. The XSS flaw resides in the /admin/modal_add_product.php script where the input parameter “description” can be manipulated to trigger cross-site scripting. Exploitation is possible remotely and an exploit has been disclosed publicl...
CVE-2023-3681 Campcodes Retro Cellphone Online Store modal_add_product.php cross site scripting
A vulnerability classified as problematic was found in Campcodes Retro Cellphone Online Store 1.0. This vulnerability affects unknown code of the file /admin/modaladdproduct.php. The manipulation of the argument description leads to cross site scripting. The attack can be initiated remotely. The...