CVE-2022-1839: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Home Clean Services Management System 1.0. This vulnerability affects the file login.php. The manipulation of the argument email with the input admin%'//AND//SELECT//5383//FROM//SELECTSLEEP2JPeh//AND//'frfq%'='frfq leads to sql injection. The...

CVE-2022-1837: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Home Clean Services Management System 1.0. It has been rated as critical. Affected by this issue is register.php?link=registerand. The manipulation with the input leads to code execution. The attack may be launched remotely but demands an authentication. Exploit detai...

Home Clean Services Management System SQL注入漏洞

Home Clean Services Management System is a home cleaning service system. version 1.0 of Home Clean Services Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

Home Clean Services Management System 代码问题漏洞

A remote code execution vulnerability exists in Home Clean Services Management System version 1.0, which originates from register.php?link=registerand fails to properly filter the special elements of the construction snippet. An attacker could exploit this vulnerability to cause arbitrary code...

cleanwavecarwashes.com Cross Site Scripting vulnerability OBB-2622199

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-30052

In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...

CVE-2022-30052

In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...

CVE-2022-30052

In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...

Sql injection

In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...

CVE-2022-30052

CVE-2022-30052 affects Home Clean Service System 1.0. Affected component: password handling parameter; underlying issue is SQL injection in the password field. Documented impact per CVSS: high severity (CVSS v2 base 7.5, CVSS v3.1 base 9.8) with network attack vector, no authentication, and parti...

CVE-2022-30052

In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...

Home Clean Service System SQL注入漏洞

Home Clean Service System is a system for providing home cleaning services by Carlo Montero, a personal developer. A security vulnerability exists in Home Clean Service System version 1.0, which stems from the password parameter being susceptible to SQL injection attacks...

CVE-2022-30052: Improper Neutralization of Special Elements used in an SQL Command

In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...

GHSA-XP26-P53H-6H2P Improper Neutralization of Input During Web Page Generation in LXML

An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping, allowing a remote attacker to conduct XSS attacks, as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to...

supercleanmedical.com Cross Site Scripting vulnerability OBB-2488487

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

5 ways to spring clean your security

It is now officailly spring in the Northern Hemisphere, and with spring and the longer days comes the inescapable urge to shake off the lethargy of Winter and embrace the need to go through your stuff, throw a bunch of it out, and give the rest of it a shiny new lustre. And in our increasingly...

WordPress Optimole plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress plugin Optimole version 3.3.2 has a cross-site scripting vulnerability that stems from the failure of image optimization and...

cleanpullcord.co.uk Improper Access Control vulnerability OBB-2414694

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Clean Social Icons plugin <= 0.9.11 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Clean Social Icons plugin versions = 0.9.11. Solution No patched version available...

WordPress Clean Social Icons plugin <= 0.9.11 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Clean Social Icons plugin versions = 0.9.11. Solution No patched version available...