37210 matches found
OpenWGA 代码注入漏洞
OpenWGA is an OpenWGA open source content management system and web application development platform. A code injection vulnerability exists in OpenWGA version 7.11.12 Build 737, which stems from a cross-site scripting vulnerability in the Admin UI component...
Chatwoot 代码注入漏洞
Chatwoot is a Chatwoot open source application. Customer Engagement Suite, an open source alternative to Intercom, Zendesk, Salesforce Service Cloud, and more. A code injection vulnerability exists in Chatwoot 4.7.0 and earlier versions, which stems from a misuse of the parameter Link in the file...
WordPress plugin WP Recipe Maker 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
PHPGurukul Curfew e-Pass Management System 代码注入漏洞
PHPGurukul Curfew e-Pass Management System is an electronic pass management system from PHPGurukul Inc. A code injection vulnerability exists in version 1.0 of the PHPGurukul Curfew e-Pass Management System, which stems from an incorrect manipulation of the Fullname/Category parameter in the file...
projectworlds Gate Pass Management System 跨站脚本漏洞
Projectworlds Gate Pass Management System is an open source gate management system from Projectworlds. A code injection vulnerability exists in version 1.0 of the projectworlds Gate Pass Management System, which originates from a cross-site scripting vulnerability in an unknown function in the fi...
Modern Shop - PHP eCommerce Platform 代码注入漏洞
Modern Shop - PHP eCommerce Platform is an online shopping mall website by ABHIRAM B Individual Developer. A code injection vulnerability exists in Modern Shop - PHP eCommerce Platform version 20250922, which stems from an incorrect manipulation of the parameter q in file/search and could lead to...
Zytec Central Authentication Service 代码注入漏洞
Zytec Central Authentication Service is a centralized authentication service from China's Zhuo Yun Zytec Company. A code injection vulnerability exists in Zytec Central Authentication Service 20251009 and earlier versions, which stems from incorrect manipulation of the parameters get.layer,...
WordPress plugin xSmart 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
PT-2025-43776
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Brecht WP Recipe Maker wp-recipe-maker allows Code Injection.This issue affects WP Recipe Maker: from n/a through = 10.1.1...
PT-2025-43833
Improper Control of Generation of Code 'Code Injection' vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Remote Code Inclusion.This issue affects Paid Videochat Turnkey Site: from n/a through = 7.3.22...
Code-Projects Simple E-Banking System 代码注入漏洞
Code-Projects Simple E-Banking System is a simple e-banking system from Code-Projects. A code injection vulnerability exists in Code-Projects Simple E-Banking System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file /eBank/register.php, which could lead...
Projectworlds Expense Management System 代码注入漏洞
Projectworlds Expense Management System is an open source expense management system from Projectworlds. A code injection vulnerability exists in Projectworlds Expense Management System version 1.0, which stems from an incorrect manipulation of an unknown function in the file...
PHP Business Website 代码注入漏洞
PHP Business Website is a PHP business website by the individual developer Iqbolshoh Ilhomjonov. PHP Business Website suffers from a code injection vulnerability that stems from the incorrect manipulation of the parameter twitter in the file admin/contact.php, which could lead to a cross-site...
Wisencode Infotech Wisenshop 代码注入漏洞
Wisencode Infotech Wisenshop is an online shopping platform from India Wisencode Infotech. A code injection vulnerability exists in Wisencode Infotech Wisenshop 20251012 and earlier versions, which stems from an incorrect manipulation of the parameter Message in the file /support-ticket/create,...
PT-2025-43812
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Jthemes xSmart xsmart allows Code Injection.This issue affects xSmart: from n/a through = 1.2.9.4...
Linux Distros Unpatched Vulnerability : CVE-2025-62697
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in The Wikimedia Foundation Mediawiki -...
SUSE CVE-2025-59823
Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64.0, Azure providers prior to version 1.55.0, OpenStack providers prior to version 1.49.0, and GCP...
CVE-2025-49926
Improper Control of Generation of Code 'Code Injection' vulnerability in Laborator Kalium kalium allows Code Injection.This issue affects Kalium: from n/a through = 3.25...
CVE-2025-58970
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in AmentoTech Doctreat doctreat allows Code Injection.This issue affects Doctreat: from n/a through = 1.6.7...