i-Educar 代码注入漏洞

i-Educar is a free educational software from Portábilis Open Source. A code injection vulnerability exists in i-Educar version 2.9.0, which stems from improper handling of the parameter Nome in the file /module/ComponenteCurricular/edit, which could lead to a cross-site scripting attack...

PT-2025-28470 · Ibm · Ibm Sterling File Gateway +1

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator versions 6.0.0.0 through 6.1.2.6 IBM Sterling B2B Integrator versions 6.2.0.0 through 6.2.0.4 IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.6 IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.4...

PT-2025-28199 · Ibm · Ibm Integration Bus

Name of the Vulnerable Software and Affected Versions: IBM Integration Bus for z/OS versions 10.1.0.0 through 10.1.0.5 Description: The issue allows for code injection by a privileged user with access to the IIB install directory. Recommendations: For versions 10.1.0.0 through 10.1.0.5, consider...

i-Educar 代码注入漏洞

i-Educar is a free educational software from Portábilis Open Source. A code injection vulnerability exists in i-Educar version 2.9.0, which stems from improper handling of the parameter Benefício in the file /intranet/educaralunobeneficiolst.php, which could lead to a cross-site scripting attack...

SourceCodester Best Salon Management System 代码注入漏洞

SourceCodester Best Salon Management System is a SourceCodester open source salon management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Best Salon Management System, which originates from an incorrect operation of the file /panel/search-appointment.php, and...

Portábilis i-Educar 代码注入漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portábilis i-Educar version 2.9.0, which stems from improper handling of the parameter Curso in the file /intranet/educarcursodet.php, which...

PT-2025-28096 · Boyuncms · Boyuncms

Name of the Vulnerable Software and Affected Versions: BoyunCMS versions up to 1.4.20 Description: A critical issue affects the Configuration File Handler component, specifically an unknown part of the /install/install ok.php file. The manipulation of the db pass argument leads to code injection...

i-Educar 代码注入漏洞

i-Educar is a free educational software open source by Portábilis. A code injection vulnerability exists in i-Educar version 2.9.0, which stems from improper handling of the parameter Escola in the file /intranet/educarescolalst.php, which could lead to a cross-site scripting attack...

SourceCodester Best Salon Management System 代码注入漏洞

SourceCodester Best Salon Management System is SourceCodester open source a salon management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Best Salon Management System, which originates from an incorrect manipulation of the parameter Staff Name in the file...

IBM Integration Bus for z/OS 代码注入漏洞

IBM Integration Bus for z/OS is an enterprise service bus product from International Business Machines IBM that runs on z/OS systems. A code injection vulnerability exists in IBM Integration Bus for z/OS versions 10.1.0.0 through 10.1.0.5, which originates from privileged user executable code...

SourceCodester Best Salon Management System 代码注入漏洞

SourceCodester Best Salon Management System is SourceCodester open source a salon management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Best Salon Management System, which stems from an incorrect manipulation of the parameter Tax Name in the file...

PT-2025-28200 · Unknown · Educoder Challenges

Name of the Vulnerable Software and Affected Versions: educoder challenges version 1.0 Description: The issue is related to insufficient security mechanisms for created containers, allowing attackers to execute arbitrary code by injecting crafted content into a container. Recommendations: For...

CodeAstro Simple Hospital Management System 代码注入漏洞

CodeAstro Simple Hospital Management System is a simple hospital management system from CodeAstro. A code injection vulnerability exists in CodeAstro Simple Hospital Management System version 1.0, which originates from a cross-site scripting attack due to an incorrect manipulation of the file...

📄 Wing FTP Server NULL-byte Authentication Bypass

Wing FTP Server allows arbitrary Lua code injection via a NULL-byte %00 truncation bug CVE-2025-47812. Supplying %00 as the username makes the C++ authentication routine validate only the prefix, while the full string is written unfiltered into the session file and later executed with root/SYSTEM...

BoyunCMS 安全漏洞

BoyunCMS is an enterprise content management system from China Boyun Boyun Company. A security vulnerability exists in BoyunCMS 1.4.20 and earlier versions, which originates from improper handling of the parameter dbpass in the file /install/installok.php, which may lead to code injection...

CVE-2025-52718

Improper Control of Generation of Code 'Code Injection' vulnerability in Beplusthemes Alone alone allows Remote Code Inclusion.This issue affects Alone: from n/a through = 7.8.2...

CVE-2025-49302

Improper Control of Generation of Code 'Code Injection' vulnerability in Scott Paterson Easy Stripe easy-stripe allows Remote Code Inclusion.This issue affects Easy Stripe: from n/a through = 1.1...

CVE-2025-27358

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Code Injection.This issue affects Frontend File Manager: from n/a through = 23.6...

Exploit for Code Injection in Grafana

CVE-2024-92...

CVE-2025-34086

Bolt CMS versions 3.7.0 and earlier contain a chain of vulnerabilities that together allow an authenticated user to achieve remote code execution. A user with valid credentials can inject arbitrary PHP code into the displayname field of the user profile, which is rendered unsanitized in backend...